HTML CHARACTER REFERENCES, LOCALLY
Convert HTML-sensitive text with care.
Escape common HTML-sensitive characters or decode common character references in your browser. The result is displayed as text and never executed.
Choose an operation, enter text, and convert it locally.
What gets converted
Escape mode replaces ampersand, less-than, greater-than, quotation mark, and apostrophe with character references. For example, <p title="A & B">It's fine.</p> becomes <p title="A & B">It's fine.</p>. This is intended for text content; escaping alone is not a general HTML sanitizer and is not a substitute for context-appropriate handling in JavaScript, CSS, or URLs.
Decode mode recognizes common named references (including &, <, ", and ©) and valid decimal or hexadecimal numeric references. Unknown names and invalid numeric code points are left unchanged. The result is placed in a text field and is never inserted as live markup. Page content updated November 3, 2026.
Runs in your browser. No uploads. No account.
Good to know
Does escaping make any input safe in every context?
No. This small tool escapes common HTML text characters. HTML text, quoted attributes, JavaScript, CSS, and URLs have different handling needs; use context-appropriate encoding and a proper sanitizer when accepting rich HTML.
Will decoded HTML run?
No. The decoded result is shown in a read-only text field. The tool does not render the input or result as HTML.
Which references can it decode?
It supports a documented small set of common named references plus valid decimal and hexadecimal numeric references. Other named references are kept as written.
Does my input leave the browser?
No. Conversion runs locally in this browser tab; the tool does not upload or save your text.
Is it free?
Yes, during beta. Optional usage-credit plans are coming soon. Payments are not available and no credits are required.
Source
Method checked November 3, 2026. MDN describes HTML character references as escape sequences used to represent characters in rendered web pages, including characters reserved by HTML syntax.
How it works
1. Choose Escape HTML text or Decode character references. 2. Enter text and convert. 3. Review and copy the result; processing stays in your browser.
Good to know
Which characters are escaped?
Escape mode replaces ampersand, less-than, greater-than, quotation mark, and apostrophe with character references.
Is this a complete HTML sanitizer?
No. It handles common HTML text characters only. Other contexts such as attributes, JavaScript, CSS, and URLs need context-appropriate handling; use a proper sanitizer for rich HTML.
Will decoded markup execute?
No. The result is displayed in a text field and is not inserted into the page as markup.
Which entities are decoded?
A small documented set of common named references and valid decimal or hexadecimal numeric references are supported. Unknown named references and invalid numeric code points are left unchanged.
Does my input leave the browser?
No. The text is converted locally in this browser tab and is not uploaded or saved.
Is it free?
Yes, during beta. Optional usage-credit plans are coming soon. Payments are not available and no credits are required.