🔤Encoder / Decoder•Client-side only

HTML Decoder & Encoder

Decode HTML entities into readable plain text or encode special characters into safe HTML entities.

🛡️

Security Guarantee: This tool strictly translates entity codes into plain text strings. Decoded markup is displayed in an inert text editor and is never executed as live browser HTML, completely eliminating script injection (XSS) risks.

Input Encoded HTML Text

8 lines•566 chars•566 B

Decoded Plain Text Output

0 lines•0 chars•0 B

📚 Common HTML Entities Reference

&&&

<<<

>>>

"""

©©©

€€€

More Free Online Developer Tools

✨

JSON Formatter & Validator

Format, beautify, minify, and validate JSON data online with detailed syntax error detection and key sorting.

Open tool →

🔄

XML to JSON Converter

Convert XML code or uploaded XML files into clean, structured JSON with attributes and namespaces preserved.

Open tool →

🌳

JSON File Viewer

Open and inspect JSON files in an interactive collapsible tree view with search, types, and path inspection.

Open tool →

📖

JavaScript Object Notation Guide

The complete guide to JavaScript Object Notation (JSON): syntax rules, creating JSON files, valid types, and formatting.

Open tool →

Complete Guide to HTML Entities & Safe Decoding

Learn how HTML entity encoding works, why safe unescaping matters, and how to avoid XSS vulnerabilities.

Understanding HTML Entities & Character Escaping

HTML entities are special strings used in HTML documents to display reserved characters (such as < and >) that would otherwise be interpreted as tag openers or closers. They are also used to represent characters that are difficult to type on a standard keyboard.

Web scrapers, CMS exports, and REST APIs frequently return strings filled with HTML entities. Our HTML decoder lets developers unescape these strings cleanly without risking XSS or code execution.

Named vs Numeric Entities

Decimal Entities: Use &# followed by the character’s decimal Unicode code point (e.g. < for <).
Hexadecimal Entities: Use &#x followed by the hexadecimal Unicode code point (e.g. < for <).

Frequently Asked Questions About HTML Decoding

What is an HTML entity decoder?: An HTML decoder is a tool that converts encoded character sequences (such as &, <, >, ", and ©) back into their original human-readable symbols (&, <, >, ", and ©).
Is it safe to decode potentially malicious HTML with this tool?: Yes. Our decoder treats all input strictly as plain text strings. It never renders unescaped markup in the DOM or uses dangerouslySetInnerHTML, completely protecting your browser against Cross-Site Scripting (XSS) attacks.
Which HTML entity formats are supported?: We support over 250 standard HTML4 named entities (such as ©, ™, €,  ), decimal numeric entities (like €), hexadecimal numeric entities (like €), and standard Windows-1252 legacy character remaps.
How do I encode plain text into HTML entities?: Switch the tool to "Encode Entities" mode. You can choose whether to escape only mandatory HTML characters (&, <, >, ", ') or convert all non-ASCII symbols into named and numeric entities for international web publishing.
Does this tool make any remote API calls?: No. All decoding and encoding is computed instantaneously and privately inside your browser using pure JavaScript.