&
HTML Entity Encoder / Decoder
Convert characters like <, >, & and quotes into safe HTML entities to prevent markup injection, or decode entities back into their original characters. Decoding uses the browser's own parser, so it understands every named and numeric entity.
Input
Output
🔒 This tool runs entirely in your browser. Your data is never uploaded.
Frequently asked questions
When should I HTML-encode text?＋
Whenever you place literal or untrusted text into HTML. Encoding characters like <, >, & and quotes stops them being parsed as markup, which prevents broken layouts and cross-site-scripting bugs.
Does it handle named and numeric entities?＋
Yes. Decoding recognises named entities such as & and ©, plus both decimal (©) and hexadecimal (©) numeric references.
Is my text uploaded anywhere?＋
No. Encoding and decoding run entirely in your browser — nothing is transmitted or stored.