HTML Entity Encode & Decode
Escape special HTML characters to entities (&, <, >, ") or decode HTML entities back to plain text. Runs entirely in your browser.
Frequently Asked Questions
Which characters get encoded to HTML entities?
The five characters that have special meaning in HTML: & → &, < → <, > → >, " → ", and ' → '. Encoding these prevents them from being interpreted as HTML markup.
When do I need to encode HTML entities?
Whenever you insert user-supplied text into HTML — for example in a template or email. Without encoding, a user could inject HTML tags or JavaScript, leading to XSS vulnerabilities.
Does decoding handle numeric entities like < or <?
This tool decodes the five named entities listed above. For a full set of HTML entities including numeric forms, use a dedicated HTML parser library.
Is my data private?
Yes — completely. Everything runs locally in your browser. Nothing is sent to any server, and nothing is retained after you close the tab.
Related Tools
Base64 Encode & Decode
Encode text to Base64 or decode Base64 strings back to plain text. Handles Unicode safely. Runs entirely in your browser — nothing is uploaded.
URL Encode & Decode
Percent-encode strings for safe use in URLs or decode percent-encoded strings back to plain text. Supports full URI and component encoding. Runs in your browser.
Find & Replace in CSV Files Online
Find and replace text values in CSV files directly in your browser. Supports plain text and regex patterns across any column — no upload required.