Encoders & Decoders

HTML Entity Encoder / Decoder

Encode or decode HTML entities in named, decimal, or hex format. Swap encode ↔ decode with one click — runs entirely in your browser.

Encode & Decode
Named / Decimal / Hex
One-Click Swap
Browser-only

Plain text

Output will appear here

HTML entity encoder and decoder

HTML entities represent reserved characters safely in markup. For example, < becomes <, & becomes &, and a quote can become ". Numeric entities use Unicode code points in decimal or hexadecimal form.

Encoding modes

Mode	Example for ampersand	Best for
Named	`&`	Human-readable HTML
Decimal	`&`	Generic Unicode handling
Hexadecimal	`&`	Code-oriented workflows

<!-- encoded user text remains text, not markup -->
&lt;script&gt;alert(&quot;Hello&quot;)&lt;/script&gt;

Encoding output before inserting untrusted values into HTML helps prevent markup injection. It is not a replacement for contextual escaping, sanitization, or a content-security policy.

Decode safely

Decode only text whose source you trust. The result may contain tags or scripts; treat decoded output as data until a safe renderer escapes it again.

Frequently Asked Questions

What is an HTML entity?: HTML entities are special character sequences used to represent reserved characters in HTML. For example, < becomes <, > becomes >, & becomes &, and " becomes ".
What is the difference between named and numeric entities?: Named entities use readable names (e.g. &). Numeric entities use the Unicode code point in decimal (&#38;) or hex (&#x26;) form. Both are interpreted identically by browsers.
When should I encode HTML entities?: Always encode user-supplied content before inserting it into HTML to prevent XSS (Cross-Site Scripting) attacks. Also encode entities in HTML attributes, email templates, and XML documents.
Does this tool encode all characters?: The tool uses standard HTML5 named entities when available and falls back to decimal or hexadecimal numeric entities for characters without a named form, including other Unicode characters.

Disclaimer

This tool is provided for general informational and utility purposes only. Results may be inaccurate, incomplete, outdated, or contain errors. Always verify results before relying on or using them.

Some tools may use AI, automated processing, third-party services, or server-side processing. Do not rely on these tools as a substitute for professional advice.

Use at your own risk. BestToolOnline makes no guarantees regarding the accuracy, reliability, completeness, availability, or suitability of results, to the maximum extent permitted by applicable law.

See our Terms of Service and Privacy Policy for complete details.

Loading tool...

HTML entity encoder and decoder

Encoding modes

Mode

Example for ampersand

Best for

Named

&

Human-readable HTML

Decimal

&

Generic Unicode handling

Hexadecimal

&

Code-oriented workflows

 <script>alert("Hello")</script>

Encoding output before inserting untrusted values into HTML helps prevent markup injection. It is not a replacement for contextual escaping, sanitization, or a content-security policy.

Decode safely

Decode only text whose source you trust. The result may contain tags or scripts; treat decoded output as data until a safe renderer escapes it again.

Frequently Asked Questions

What is an HTML entity?

HTML entities are special character sequences used to represent reserved characters in HTML. For example, < becomes <, > becomes >, & becomes &, and " becomes ".

What is the difference between named and numeric entities?

Named entities use readable names (e.g. &). Numeric entities use the Unicode code point in decimal (&#38;) or hex (&#x26;) form. Both are interpreted identically by browsers.

When should I encode HTML entities?

Always encode user-supplied content before inserting it into HTML to prevent XSS (Cross-Site Scripting) attacks. Also encode entities in HTML attributes, email templates, and XML documents.

Does this tool encode all characters?

The tool uses standard HTML5 named entities when available and falls back to decimal or hexadecimal numeric entities for characters without a named form, including other Unicode characters.

Disclaimer

Some tools may use AI, automated processing, third-party services, or server-side processing. Do not rely on these tools as a substitute for professional advice.