Safely encode/decode HTML special characters to prevent XSS in web pages.
Output
How to Use HTML Encoder / Decoder
1
Paste HTML or plain text into the box.
2
Click Encode to convert < > & " to entities, or Decode to revert.
3
Copy the safe output.
Features
✓Encodes all HTML special characters
✓Decodes all named and numeric HTML entities
✓Server-side using PHP htmlspecialchars()
✓Reference table of common entities
Why Use This Tool
Prevent XSS (cross-site scripting) vulnerabilities
Display raw HTML code in a web page safely
Essential for web developers and content managers
Accurate server-side encoding
Frequently Asked Questions
What is HTML encoding used for?
HTML encoding converts characters like < and > into < and > so browsers display them as text instead of interpreting them as HTML tags.
What is the difference from URL encoding?
URL encoding (percent-encoding) is for URLs. HTML encoding is for safe display inside HTML pages.