Toolkit Shelf
Find

Utility Tools

HTML Entity Encoder / Decoder

Use this HTML entity encoder / decoder to escape snippets for display, inspect CMS copy, decode copied markup, and check text before pasting into HTML fields.

Catalog QA baseline June 6, 2026Free toolSource note included

Live converter

HTML entity encoder / decoder

Encoded HTML entities
Tom & "Jerry" <span>©</span>
StatusReady

Double quotes.

Changes7 replacements

28 input characters to 54 output characters.

Entity summary

Quick check for copy, snippets, CMS fields, and HTML attributes.

MeasureValue
Input characters28
Output characters54
Replacements7
Quote handlingDouble quotes
Encoding note

HTML entities are escaping, not sanitization. They help reserved characters display as text, but they do not make unsafe HTML safe to render.

Quick answer

HTML Entity Encoder / Decoder: what it generates

HTML Entity Encoder / Decoder generates encoded or decoded HTML entity text from text or HTML snippet, entity input, mode, quote handling, and non-ASCII option. The visible generation method is Output = replace reserved HTML text characters with named or numeric character references, or reverse valid references to Unicode text.

Draft outputEncoded or decoded HTML entity text
InputsText or HTML snippet, Entity input, Mode, Quote handling, Non-ASCII option
Generation methodHTML entity escaping method

Generation method

HTML entity escaping method

Output = replace reserved HTML text characters with named or numeric character references, or reverse valid references to Unicode text

HTML entity encoding helps text display safely as text, but it is not a full HTML sanitizer.

How to use

Steps

  1. Choose whether to encode plain text or decode entity text.
  2. Pick how quote characters should be handled when encoding.
  3. Turn on numeric encoding for non-ASCII characters if the target system needs ASCII-only output.
  4. Review the replacement count and output before copying.

Example

Sample output

InputTom & Jerry <span>
EncodedTom &amp; Jerry &lt;span&gt;
Numeric example&#169; decodes to the copyright symbol

Generator use

Best for

  • Use this HTML entity encoder / decoder to escape snippets for display, inspect CMS copy, decode copied markup, and check text before pasting into HTML fields.
  • Reviewing the visible generation method and assumptions before relying on the encoded or decoded HTML entity text.
  • Comparing the output with the sample output and benchmark table before using it elsewhere.
  • Browser-side link, file, format, and web utility tasks that need an output now.

Before relying on it

Check first

  • Using the encoded or decoded HTML entity text before confirming the visible inputs match the same task and context: text or HTML snippet, entity input, mode, and 2 additional inputs.
  • Ignoring that hTML entity encoding helps text display safely as text, but it is not a full HTML sanitizer.
  • Skipping the source notes when the formula, benchmark, or warning depends on outside context.
  • Publishing a generated file or code without testing it in the real destination.

Details

What to know before using the output

Reserved characters& < > quotes

The encoder escapes ampersands, angle brackets, and optional quote characters so text can appear inside HTML safely as text.

Entity formatsNamed, decimal, and hex

The decoder supports common named entities plus decimal references like &#169; and hexadecimal references like &#xA9;.

Security boundaryNot sanitization

Escaping text is useful, but rendering untrusted HTML still needs a real sanitizer and careful framework handling.

Source notes

References used for this generator

WHATWG HTMLDefines character references and the parsing model used by browsers.MDN Web DocsDocuments how reserved characters and character references behave in HTML text.

Benchmarks

How to read the output

Ampersand: &amp;.

Escape ampersands first when converting text to HTML entity form.

Angle brackets: &lt; and &gt;.

Useful when code or tags should be displayed instead of interpreted as markup.

Numeric references: &#169; or &#xA9;.

Decimal and hexadecimal numeric references can represent Unicode code points.

Method and limitations

Methodology and assumptions

Generation method

Output = replace reserved HTML text characters with named or numeric character references, or reverse valid references to Unicode text

Inputs used

Text or HTML snippet, Entity input, Mode, Quote handling, Non-ASCII option

Limitations

Utility outputs depend on the encoded payload, file format, target app, scanner, printer, browser, and real-world testing before sharing.

Catalog QA baseline

June 6, 2026. This date marks the catalog-wide automated and editorial QA baseline, not a tool-specific expert review.

Cite this page

Toolkit Shelf. HTML Entity Encoder / Decoder. Page version June 6, 2026. https://toolkitshelf.com/tools/html-entity-encoder-decoder

FAQ

Common questions

Is HTML entity encoding the same as sanitizing HTML?

No. Entity encoding helps reserved characters display as text. Sanitizing HTML is a broader security process for untrusted markup.

When should I encode quotes?

Encode quotes when text may be placed inside HTML attributes. For normal text nodes, escaping ampersands and angle brackets is usually the main requirement.

Does this decode numeric HTML entities?

Yes. It decodes decimal references such as &#169; and hexadecimal references such as &#xA9; when they point to valid Unicode text.

Do utility tools upload my payload?

Use the page notes for each tool. Browser-side utilities can generate outputs locally, but the final file or code may still reveal whatever you encode or share.

Why should I test the generated output?

Scanners, printers, file viewers, apps, and platform previews can behave differently, so test the exact downloaded output before using it publicly.