HTML entities encoder
Escape or unescape HTML entities (<, &, "…).
🔒 100% client-side — no data sent
Encode and decode HTML entities online: convert <, >, &, " and special characters into < > & " and back. Perfect for escaping code in a web page, preventing XSS issues, or displaying literal tags. All processing happens 100% in your browser, so no data ever leaves your device.
FAQ
What is an HTML entity?
An HTML entity is a character sequence starting with & and ending with ; that represents a reserved or special character (e.g. < for <, & for &). It lets you display these symbols without them being interpreted as code.
What is the difference between encoding and decoding HTML entities?
Encoding turns special characters into entities (< becomes <) for safe display; decoding does the reverse and restores the original characters (< becomes < again). The tool handles both directions.
Why does escaping HTML entities protect against XSS?
By converting < > & " into entities, user-supplied content is shown as text instead of being executed as HTML or JavaScript, which blocks script injection (XSS).
Is my data sent to a server?
No, encoding and decoding run entirely in your browser. No text is transmitted or stored online.