🏷️ HTML Entity Encode & Decode
Convert special characters to HTML entities or decode them back. Runs entirely in your browser.
What Are HTML Entities and Why Are They Important for Web Security?
HTML entities are special sequences that represent characters which have reserved meaning in HTML markup. When you display user-generated content on a web page, characters like <, >, &, and " must be converted to their entity equivalents to prevent the browser from interpreting them as HTML tags — which would create Cross-Site Scripting (XSS) vulnerabilities.
Complete Reference Table of Common HTML Entities
<→<— Less-than sign (opens HTML tags)>→>— Greater-than sign (closes HTML tags)&→&— Ampersand (starts entity sequences)"→"— Double quote (delimits HTML attribute values)'→'— Single quote / apostrophe → Non-breaking space©→ © — Copyright symbol®→ ® — Registered trademark—→ — — Em dash
When to Use HTML Entity Encoding in Your Projects
- Displaying user input safely on web pages — Encode all user-submitted text before rendering it in HTML to prevent XSS attacks
- Embedding code snippets in HTML documents — Show
<div>as text instead of the browser rendering it as an element - Email templates with special characters — Many email clients require entities for proper rendering
- CMS and blog content — Ensure special characters display correctly across different platforms
- Fixing broken HTML that shows raw entities — Decode
&back to&when entities have been double-encoded
HTML Entity Encoding vs URL Encoding — Which One Should You Use?
HTML entity encoding is for content displayed inside HTML pages. URL encoding (percent-encoding) is for data transmitted in URLs and query strings. Using the wrong encoding type can lead to security vulnerabilities or broken data. Always encode for the context where the data will be used.