Nexvert100% Client-Side
Developer Tools

HTML Entity Encoder & Decoder

Escape special characters into safe HTML entities (<, >, &, ") and unescape HTML-encoded strings.

  • 100% free
  • Files stay on your device
  • No sign-up, no watermark
Input Text
Encoded Result

Related Developer Utilities

URL Encoder & Decoder
Encode strings into percent-encoded query components or decode URI parameters with support for RFC 3986.
HTML Formatter & Beautifier
Format, indent, and prettify messy HTML markup with configurable indentation rules and tag preservation.
Base64 Encoder & Decoder for Text and Files
Encode text or binary files to Base64 strings and decode Base64 back to original files or UTF-8 text.

What is HTML Entity Encoder & Decoder?

The HTML Entity Encoder escapes characters that have special meaning in HTML — < > & " ' — into entities like &lt; and &amp;, so code samples and user text display literally instead of being interpreted as markup. Unescape mode does the reverse, turning entity-encoded text back into readable characters. Escaping user-supplied text is also a basic defence against HTML injection in templates.

How to use HTML Entity Encoder & Decoder

  1. 1

    Choose Escape or Unescape

    Pick whether to encode characters or decode entities.

  2. 2

    Paste your text

    Enter HTML, code or text in the input box.

  3. 3

    Copy the output

    The converted text appears instantly and can be copied.

Frequently asked questions

Which characters are escaped?

The five HTML-significant characters: < > & " and '. This is enough to display text safely inside HTML content and attributes.

Is escaping enough to prevent XSS?

It protects text placed inside HTML content and quoted attributes. JavaScript, URL and CSS contexts need their own escaping rules.

Can it decode named entities like &nbsp; or &copy;?

Yes. Unescape mode uses the browser’s HTML parser, which understands named and numeric entities.

Last updated: