HTML Entity Encoder & Decoder

Encode text to named, decimal or hexadecimal HTML entities (such as the copyright sign) with an option to encode only the five dangerous characters, and decode entities safely without executing any tag.

Workspace

How the result is calculated

Encoding: the five characters & < > " ' are always encoded (&amp; &lt; &gt; &quot; &#39;), visible ASCII stays as is, and non-ASCII is encoded by name when it exists in the HTML4 table (252 entities), otherwise as decimal or hex. Decoding goes through DOMParser after escaping <, so no tags or scripts are executed, and it supports every HTML5 entity the browser knows.

Limits: The encoding name table is HTML4 (252 names), not all 2231 HTML5 names, so other characters are encoded numerically (which is correct). Composite emoji are encoded code point by code point. Decoding follows the browser’s HTML parser, so entities without a semicolon (&copy) are read as the browser does.

FAQ

Is decoding safe?

Yes, < is escaped first and nothing is injected into the page.

When should I use numeric encoding?

When the target does not know the name (XML does not know &copy;).

Newest tools

Recently added free tools — they run in your browser without uploading your data

All tools →

Classify keyword intent (informational/commercial/transactional/navigational) and cluster by Jaccard similarity with cannibalization detection

Local

Statically check HTML links: invalid, duplicate, javascript:, mixed content, missing anchors and images without alt

Local

Analyze a backlink CSV: unique domains, dofollow, anchor classification, TLDs and top-10 concentration

Local

Measure readability (Flesch/Fog/ARI), vocabulary diversity (MTLD), structure and evidence with an E-E-A-T checklist and a stated formula

Local