HTML Entity Encoder
Escape (or unescape) & < > " ' for safe HTML.
How to use the HTML Entity Encoder tool
- Enter your html entities in the fields above.
- Adjust any slider or type an exact number — the answer updates as you go.
- Copy the result and close the tab. Nothing you entered was sent anywhere.
About the HTML Entity Encoder tool
Escape text so it displays literally inside HTML — converting & < > " and ' to their entity forms — or reverse the process to decode entities back to characters.
Escaping user-supplied text before inserting it into HTML output is the single most effective defense against reflected XSS.
Everything runs locally in your browser: no data is uploaded, no account is needed, and it works offline once the page has loaded.
Embed this tool
Customize and copy an iframe. Linking back helps both sites.