HTML Encoder and Decoder
Easily encode or decode HTML characters
Input
Output
Share Link
What is an HTML encoder?
An HTML encoder is a tool that converts characters such as <, >, and & into HTML entities so browsers render them as text instead of markup. Encoding is used when you need to display code samples, stop a string from being interpreted as HTML, or prepare content for a field that expects escaped input.
How do I encode or decode HTML?
Paste text into the input box and choose Encode or Decode. Encode turns reserved characters into entities. Decode reverses that process. Auto Update re-encodes as you type. Pretty Display formats multiline output. Nothing is uploaded to a server; processing happens in your browser. This page is a free utility from Panoptic Scans, a hosted vulnerability scanning platform that uses OpenVAS, ZAP, Nmap, and Nuclei.
When should I encode HTML?
Encode HTML when you publish snippets, store user-supplied strings that might include tags, or copy markup into a CMS that would otherwise execute it. Decoding is useful when you receive entity-encoded text and need the original characters. For application security testing, encoding is not a substitute for context-aware output encoding in your product; use this tool for conversion, then follow OWASP output-encoding guidance in production code.