To prevent XSS and to display code or user input safely in HTML.

Which entities are supported?

Standard five: & < > " ' (and ' when unescaping).

HTML Escape / Encode

Runs in browser

Escape and unescape HTML entities instantly in the browser.

Escape and unescape HTML entities instantly in your browser. Convert special characters to HTML-safe format. Free online HTML encoder.

HTML to escape

Files never leave your browser.

Drag and drop a file here, or tap to select

Escaped

&lt;div class=&quot;hero&quot;&gt;
  &lt;h1&gt;Browser &amp; Developer Tools&lt;/h1&gt;
  &lt;p&gt;Fast, &quot;private&quot; tools for &lt;strong&gt;every&lt;/strong&gt; developer.&lt;/p&gt;
  &lt;a href=&quot;https://tooldock.org?ref=hero&amp;utm_source=demo&quot;&gt;Try ToolDock →&lt;/a&gt;
&lt;/div&gt;

🔒 Runs in your browser · No uploads · Your data never leaves your device

How to use

Choose mode
Switch between Escape (text → safe HTML) and Unescape (entities → raw text).
Enter input
Type or paste the text or HTML-escaped string.
Copy result
Use Copy to copy the escaped or unescaped output.

Common use cases

Safely displaying user-generated content — Escape HTML before inserting user input into a web page to prevent XSS vulnerabilities and broken markup.
Embedding code samples in HTML — Escape code snippets so angle brackets render as text rather than being interpreted as HTML tags.

Examples

Escape

Special chars become entities.

Input

<div>Hello & "world"</div>

Output

&lt;div&gt;Hello &amp; &quot;world&quot;&lt;/div&gt;

Frequently asked questions

Why escape HTML?: To prevent XSS and to display code or user input safely in HTML.
Which entities are supported?: Standard five: & < > " ' (and ' when unescaping).

Key concepts

HTML entity: A special sequence starting with & and ending with ; that represents a character in HTML — e.g. < for < and & for &.
XSS (Cross-Site Scripting): A security vulnerability where attackers inject malicious scripts into web pages by exploiting unescaped user input.

You might find these useful too.