Toolkit Shelf
Find

HTML Entity Encoder / Decoder

Use this HTML entity encoder / decoder to escape snippets for display, inspect CMS copy, decode copied markup, and check text before pasting into HTML fields.

Live converter

HTML entity encoder / decoder

Encoded HTML entities
Tom & "Jerry" <span>©</span>
StatusReady

Double quotes.

Changes7 replacements

28 input characters to 54 output characters.

Entity summary

Quick check for copy, snippets, CMS fields, and HTML attributes.

MeasureValue
Input characters28
Output characters54
Replacements7
Quote handlingDouble quotes
Encoding note

HTML entities are escaping, not sanitization. They help reserved characters display as text, but they do not make unsafe HTML safe to render.

Generation method

HTML entity escaping method

Output = replace reserved HTML text characters with named or numeric character references, or reverse valid references to Unicode text

HTML entity encoding helps text display safely as text, but it is not a full HTML sanitizer.

How to use

Steps

  1. Choose whether to encode plain text or decode entity text.
  2. Pick how quote characters should be handled when encoding.
  3. Turn on numeric encoding for non-ASCII characters if the target system needs ASCII-only output.
  4. Review the replacement count and output before copying.

Example

Sample output

InputTom & Jerry <span>
EncodedTom &amp; Jerry &lt;span&gt;
Numeric example&#169; decodes to the copyright symbol

Generator use

Best for

  • Browser-side link, file, format, and web utility tasks that need an output now.
  • Generating reusable artifacts such as QR codes, snippets, exports, or cleaned payloads.

Before relying on it

Check first

  • HTML entity encoding helps text display safely as text, but it is not a full HTML sanitizer.
  • Publishing a generated file or code without testing it in the real destination.
  • Encoding private or sensitive data into an output that other people can scan, copy, or inspect.

Details

What to know before using the output

Reserved characters& < > quotes

The encoder escapes ampersands, angle brackets, and optional quote characters so text can appear inside HTML safely as text.

Entity formatsNamed, decimal, and hex

The decoder supports common named entities plus decimal references like &#169; and hexadecimal references like &#xA9;.

Security boundaryNot sanitization

Escaping text is useful, but rendering untrusted HTML still needs a real sanitizer and careful framework handling.

Source notes

References used for this generator

WHATWG HTMLDefines character references and the parsing model used by browsers.MDN Web DocsDocuments how reserved characters and character references behave in HTML text.

Benchmarks

How to read the output

Ampersand: &amp;.

Escape ampersands first when converting text to HTML entity form.

Angle brackets: &lt; and &gt;.

Useful when code or tags should be displayed instead of interpreted as markup.

Numeric references: &#169; or &#xA9;.

Decimal and hexadecimal numeric references can represent Unicode code points.

Method and limitations

Methodology and assumptions

Formula, inputs, limitations and review record
Generation method

Output = replace reserved HTML text characters with named or numeric character references, or reverse valid references to Unicode text

Inputs used

Text or HTML snippet, Entity input, Mode, Quote handling, Non-ASCII option

Limitations

Utility outputs depend on the encoded payload, file format, target app, scanner, printer, browser, and real-world testing before sharing.

Review record

Catalog QA baseline on June 6, 2026. This date marks the catalog-wide automated and editorial QA baseline, not a tool-specific expert review.

Cite this page

Toolkit Shelf. HTML Entity Encoder / Decoder. https://toolkitshelf.com/tools/html-entity-encoder-decoder

FAQ

Common questions

Is HTML entity encoding the same as sanitizing HTML?

No. Entity encoding helps reserved characters display as text. Sanitizing HTML is a broader security process for untrusted markup.

When should I encode quotes?

Encode quotes when text may be placed inside HTML attributes. For normal text nodes, escaping ampersands and angle brackets is usually the main requirement.

Does this decode numeric HTML entities?

Yes. It decodes decimal references such as &#169; and hexadecimal references such as &#xA9; when they point to valid Unicode text.