Loading…
Encode/decode HTML entities (& < >). Use for HTML text; for URLs use url-encoder. Input: text ≤10MB. Returns encoded/decoded text. 100% client-side.
HTML Entity Encoder/Decoder is loading — interactive editor will appear here. Use examples below to try instantly once loaded.
Press ? for keyboard shortcuts
Encodes and decodes HTML entities with named, numeric, and hex reference modes. Provides body and attribute content presets that follow HTML spec escaping rules, a searchable entity reference table, and quick-insert buttons for common entities like & < > " '.
Handling HTML entities manually leads to XSS vulnerabilities and rendering bugs when user-generated content contains special characters. This tool ensures proper encoding based on context (body vs attribute) and makes it easy to look up or insert any HTML entity.
This tool is part of the DevStackIO platform — a collection of free online developer tools from DevStackIO. Browse more free developer resources on DevStackIO.
Frontend developers sanitizing user input, content authors preparing HTML with special characters, and security engineers auditing XSS prevention in templates.
Type or paste text in the input area; the encoded/decoded output updates in real time
Select encoding mode: named (&), numeric (&), or hex (&) reference style
Choose a preset: Body (encodes < > &) or Attribute (encodes < > & " ') for context-appropriate escaping
Use the entity reference table to search for any Unicode character by name, code point, or entity
Click quick-insert buttons to instantly insert common entities like © or —
Use the decode mode to convert entity-encoded text back to plain characters
Input: '<script>alert(1)</script>' with body preset. Output: '<script>alert(1)</script>'Input: '© 2024 My Company' with hex mode encode. Output: '© 2024 My Company'What is the difference between named, numeric, and hex entities?
Named use & etc, numeric use &, hex use &. All render the same character.
Why does the attribute preset also escape quotes?
Quotes delimit attribute values and must be escaped to prevent breaking the HTML.
Can I decode HTML entities from an RSS feed?
Yes, paste the feed content and switch to decode mode.
Is the entity reference table searchable?
Yes, type a character name, entity name, or code point to filter.
Authoritative specifications, standards, and in-depth reading for HTML Entity Encoder/Decoder.
Common HTML Entities
Free online Base64 encoder and decoder with URL-safe mode. Use as default for text; for split encode-only/decode-only URLs use base64-encoder/base64-decoder (aliases), for image files use image-to-base64. Input: text ≤10MB. Returns Base64 string or decoded text + error location. Convert instantly in your browser.
Free online URL encoder and decoder for query strings and components. Private client-side conversion.
Convert text to binary and back. Use for binary strings; for other bases use base-converter. Input: text ≤10MB. Returns 0/1 string or decoded text. 100% client-side.
Convert text to hex and back. Use for hex encoding; for hashes use hash-generator. Input: text ≤10MB. Returns hex string or decoded text. 100% client-side.
Escape/unescape JS strings. Use for code literals; for JSON strings use json-escaper. Input: text ≤10MB. Returns escaped text. 100% client-side.
Convert images to Base64 encoded strings online for free. Use for image files only; for text use base64. Input: image file ≤10MB. Returns Base64 data URI for HTML/CSS/JS. Generate Base64 data URIs for embedding images directly in HTML, CSS, and JavaScript code.
Translate text to Morse code and back. Use for learning or signaling. Input: text ≤10MB. Returns dots/dashes or decoded text. 100% client-side.
Extract HTML tables to JSON arrays for scraping. Use for <table> input only; for CSV to JSON use csv-to-json. Input: HTML with tables ≤10MB. Returns JSON array or NO_TABLE_FOUND error. 100% client-side.