HTML escape
Encode or decode the five basic HTML character entities as text.
Loading the tool… JavaScript is required for processing on your device. The instructions and examples below are available without JavaScript.
How to use it
Choose encode or decode, then paste text.
Good to know
This is text only; it never renders HTML.
Show markup as text
Choose Encode when you need to display a snippet instead of having it interpreted as markup. For example, <a href="/">It's useful & safe</a> becomes <a href="/">It's useful & safe</a>.
Decode only the entities it knows
Decode reverses &, <, >, ", and '. It does not decode every named or numeric HTML entity, parse a document, or validate HTML.
Escaping is useful for rendering text safely in the right context, but it is not a complete security policy. Keep context-aware output handling in the application that renders user-controlled content.