HTML Encode / Decode

What is HTML Encode / Decode?

HTML encode converts special characters into HTML entities so they display correctly and safely in web pages. Characters like <, >, &, and quotes can break HTML structure or enable cross-site scripting (XSS) if rendered raw. Encoding turns < into <, & into &, and so on—so the browser renders the character instead of interpreting it as markup. Decode does the reverse: it converts entities back to plain characters.

Real-world use cases include preventing XSS when displaying user-generated content, safely embedding code snippets in HTML, preparing text for email templates, and fixing double-encoded or corrupted entities. The tool supports three entity formats: Named (&), Decimal (&), and Hex (&). Scope options let you encode only what's needed: All Characters for full HTML safety, Text Only for body content, or Attribute Safe for attribute values (only &, <, ", '). All processing runs in your browser.

How to Use HTML Encode / Decode

1. Switch between the Encode and Decode tabs depending on your task.
2. In Encode mode: paste or type text containing special characters (<, >, &, quotes) into the input area.
3. Click Encode or press Ctrl+Enter. The encoded result appears in the output.
4. Open Advanced to choose entity format (Named, Decimal, Hex) and scope (All Characters, Text Only, Attribute Safe).
5. In Decode mode: paste HTML or text with entities (e.g. <div>) into the input area.
6. Click Decode. The decoded plain text appears. Enable Show diagnostics in Advanced to find malformed or incomplete entities.
7. Click Copy to copy the result. Press Ctrl+Shift+C to copy, Esc to clear.

Tips & Best Practices

Use Attribute Safe when inserting text into HTML attribute values (e.g. title="..."); it encodes only characters that break attributes. Use Text Only for body content when you don't need to encode high Unicode. Named entities are most readable; decimal and hex work in XML and when named entities aren't available. Diagnostics help find trailing & without a semicolon or invalid numeric ranges. Never trust user input—always encode before rendering. Press Esc to clear the current tab.

When to Use This Tool

Use HTML Encode when preparing user input for safe display, embedding code in documentation, or building email templates. Use Decode when fixing double-encoded text or extracting plain text from HTML with entities. For related tasks: use the Base64 encoder for encoding binary or transport (not for HTML display), the URL encode/decode for URL parameters, or the Regex tester to find or replace entities in bulk.