Encode and decode HTML entities for safe display

Encode all non-ASCII characters

Input

Output

Common HTML Entities

Ampersand

Less than

Greater than

Double quote

Single quote

␣

Non-breaking space

Registered

™

Trademark

€

Euro

Pound

Yen

—

Em dash

…

Ellipsis

←

Left arrow

→

Right arrow

•

Bullet

Degree

Examples

Before Encoding:

<script>alert("Hello & World")</script>

After Encoding:

<script>alert("Hello & World")</script>

Encode special characters as HTML entities to display them safely in web pages, or decode HTML entities back to readable characters. Essential for preventing XSS attacks, displaying code snippets, and handling special characters in web content.

How to Use

1Paste text containing special characters
2Click Encode to convert to HTML entities
3Or paste HTML entities to decode
4Review common entity reference table
5Copy encoded/decoded result

Frequently Asked Questions

Why do I need to encode HTML?

HTML encoding prevents browsers from interpreting characters as code. Essential for security (prevents XSS attacks), displaying code examples, and showing characters like <, >, &, and quotes literally.

What characters must be HTML encoded?

At minimum: < (< or <), > (> or >), & (& or &), " (" or "), and ' (' or '). Encode anything that could be interpreted as HTML.

Should I encode all user input?

Yes, always encode user-provided content before displaying in HTML. This is your primary defense against XSS attacks. Modern frameworks often handle this automatically.

HTML Encoder/Decoder

Input

Output

Common HTML Entities

Examples

How to Use

Frequently Asked Questions

Related Tools

How to Use

Frequently Asked Questions

Related Tools

HTML Encoder/Decoder

InputClear

OutputSwapCopy

Common HTML Entities

Examples

How to Use

Frequently Asked Questions

Related Tools

Related tools

How to Use

Frequently Asked Questions

Related Tools

Input

Output