HTML Entity Encoder / Decoder
Escape dangerous HTML characters (<, >, &, ", ') into safe HTML entities to prevent XSS injection.
How to Use HTML Entity Encoder / Decoder
Paste your HTML markup or unescaped string.
Click 'Escape Entities' or 'Decode Entities'.
Copy the safe HTML representation.
HTML Entity Encoder / Decoder runs 100% client-side in your web browser. Your data, passwords, keys, and files are processed using the Web Crypto API and never transmitted to any server. Zero telemetry, zero storage, zero cloud processing.
Frequently Asked Questions
Which characters are escaped?
& (&), < (<), > (>), " ("), and ' (').
Related Security Tools
JWT Decoder & Inspector
Inspect, decode, and pretty-print JSON Web Token headers, claims, expiration dates, and payloads.
JWT Generator
Construct and sign mock or test JSON Web Tokens with custom payloads, claims, and HMAC secrets.
JWT Validator & Signature Checker
Validate token signatures, expiration timestamps, issued-at timing, and algorithm compliance.
Base64 Encoder / Decoder
Encode plaintext to Base64/Base64URL and decode Base64 data back to readable UTF-8 strings.
URL Encoder / Decoder
Percent-encode special URI query parameters and decode %20, %2F sequences into clean URLs.
UUID Generator (v4 & v7)
Generate RFC 4122 v4 random UUIDs and time-ordered v7 UUIDs individually or in bulk.