HTML Entity Encoder / Decoder

HTML uses a few characters for its own syntax, so the ampersand, the less-than and greater-than signs and quotes must be written as entities such as &, < and " when they appear as text. Escaping them is also the first defence against cross-site scripting (XSS) when you show user input on a page. Choose “special characters” to escape only those five characters, or “all non-ASCII” to also turn accented letters, symbols and emoji into numeric entities like é — useful for old systems, e-mail templates and files with an unknown encoding. Decode mode does the opposite: it turns named, decimal and hexadecimal entities back into readable characters, exactly as a browser would. The reference table lists the entities you will need most often. Everything runs in your browser.