MFAYSAL.DEV

HTML Entity Encoder & Decoder

Paste HTML or text and choose a direction. Free, private and runs in your browser.

Your details

Direction

Result

Why escape HTML?

The characters <, >, &, " and ' have special meaning in HTML. If you want to show code on a web page, or insert user input into a page, you must escape them. Otherwise the browser treats them as markup, which can break the layout or open a cross-site scripting (XSS) hole.

Named vs numeric entities

Named entities such as &copy; are easy to read, while numeric ones such as &#169; or &#xA9; work for any Unicode character. The decoder understands named, decimal and hex entities. Modern pages served as UTF-8 don't need £ or é encoded, but the "encode every non-ASCII" option helps with old systems and email templates.

Frequently asked questions

What does &amp; mean?

It is the escaped form of the ampersand (&).

Is escaping enough to stop XSS?

It is the main defence for text inside HTML, but attributes, URLs and scripts need context-specific escaping too.

✨ New: Remove the background from any image free – private, in your browser, transparent PNG.

Related free tools

Browse all 102 free tools →

Note: This free tool runs entirely in your browser. No data is sent or stored. Results are for information only.