HTML Entity Decoder
Decode HTML entities to characters and encode text to HTML entities. Supports named, decimal and hex entities. Free online tool, instant results in browser.
What are HTML entities?
HTML entities are codes used to represent characters that have special meaning in HTML. They start with an ampersand (&) and end with a semicolon (;). For example, & represents the ampersand character, < represents less than (<), and > represents greater than (>). Try decoding and encoding at www.localtoolz.com.
What is the difference between named, decimal, and hexadecimal entities?
Named entities use readable names like & for ampersand. Decimal entities use base-10 numbers like & for ampersand. Hexadecimal entities use base-16 numbers like & for ampersand. All three represent the same character but in different formats.
When should I encode HTML entities?
You should encode HTML entities when displaying user-generated content to prevent XSS attacks, when working with special characters like < > & " in HTML, or when embedding code examples in web pages. Encoding ensures characters display correctly without being interpreted as HTML markup.
Is my data safe with this tool?
Yes, completely safe. All encoding and decoding happens locally in your browser at www.localtoolz.com. Your data never leaves your device, never gets uploaded to any server, and remains 100% private. No tracking, no data collection.
Can this tool handle Unicode characters?
Yes, this tool fully supports Unicode characters. You can encode any Unicode character to its numeric entity representation (decimal or hexadecimal) and decode entities back to Unicode characters, including emojis, CJK characters, and special symbols.
What are the most common HTML entities?
The most common HTML entities are: & (ampersand), < (less than), > (greater than), " (double quote), ' (apostrophe), (non-breaking space), and © (copyright symbol). These are essential for web development.
How does HTML entity encoding prevent security issues?
HTML entity encoding prevents Cross-Site Scripting (XSS) attacks by converting special characters to their entity representations. When user input is encoded before display, malicious scripts cannot execute because the browser treats them as text, not code.
Can I use this tool offline?
Yes, once the page loads, all encoding and decoding functions work completely offline. The tool runs entirely in your browser using JavaScript, so no internet connection is needed after the initial page load.
What is the difference between HTML encoding and URL encoding?
HTML encoding converts characters to HTML entities for safe display in web pages (e.g., < becomes <). URL encoding converts characters to percent-encoded format for safe transmission in URLs (e.g., space becomes %20). They serve different purposes.
Does this tool support batch processing?
Yes, you can paste large blocks of text and the tool will process all entities at once. It handles multiple lines, mixed content, and can process thousands of characters instantly in your browser.