Escape the characters that break HTML, or turn entities such as © and € back into readable text. Works entirely in your browser.
Runs in your browser — nothing is uploaded
Five characters carry special meaning in HTML: ampersand, less-than, greater-than, double quote and single quote. Writing them as entities such as & or < stops the browser from reading user text as markup, which is the basic defence against cross-site scripting when you place content into a page.
Named entities such as © and € cover common symbols, and numeric references such as € or € can represent any Unicode code point. Decoding turns them back into the characters they stand for, so a value copied from source code or a feed becomes readable again.
Escaping is not a substitute for a template engine or a sanitiser. Use this tool to inspect and prepare text; frameworks should escape output automatically when they render pages.
At minimum the ampersand, less-than, greater-than, double quote and single quote. The ampersand must be handled first: if < were replaced with < before ampersands were escaped, the new ampersand would be escaped again. This tool escapes ampersands first, so the output decodes correctly.
' is the numeric reference for the apostrophe and works in every HTML version. ' is a named entity defined in HTML5 and XML, but some older browsers and email clients do not recognise it. This tool uses ' for maximum compatibility.
stands for a no-break space, U+00A0. It looks like a normal space but is a different character, so search, comparison and identifier code may treat it differently. Replace it with a regular space when the text is used as data rather than display.
The x in a hexadecimal reference is case-insensitive, so € and € name the same character. Named entities are case-sensitive in the HTML standard. This tool knows only a common subset, and any name it does not list is left unchanged.
No. Only sequences that start with an ampersand, contain a name or number, and end with a semicolon are replaced. An ampersand followed by a space or an unknown name stays exactly as typed.
No. Escaping and unescaping run with JavaScript in your browser, so markup pasted here stays on your machine.