HTML entity encode & decode

Escaping converts characters that browsers treat as markup — <, >, &, " and ’ — into safe HTML entities so they display as text instead of breaking your page (or enabling injection). Paste markup to escape it, or entities to turn them back into characters.

&

HTML entity encode & decode

Escape / unescape HTML

Input
Output
Output appears here…

0 bytes of your file have left this device. Counted live in this tab, not claimed — open your browser’s Network tab and watch.

How it works

  1. 1

    Paste your input on the left.

  2. 2

    Pick a mode if the tool has one — the result updates instantly.

  3. 3

    Copy the output with one click. Nothing is ever uploaded.

Frequently asked questions

When do I need this?

Whenever you show user-supplied text inside HTML — escaping &, < and > prevents broken layout and cross-site-scripting (XSS).

Does it run offline?

Yes, it is 100% in-browser, so it works offline and never uploads your text.