HTML Entity Converter

HTML Entity Converter switches text between its raw form and HTML-entity-encoded form — the &amp; &lt; &gt; &quot; and &#NNNN; sequences that prevent characters from being interpreted as HTML markup. The five characters that always need encoding inside HTML content are & < > " and ', and this tool handles all of them correctly. You need this when rendering user-generated content inside a web page. If a blog comment contains the text "<script>alert(1)</script>" and you insert it into the DOM without encoding, the browser executes it — that's a stored XSS vulnerability. Encoding < as &lt; turns it into visible text instead of a live tag. The same applies when displaying JSON or code snippets inside <pre> blocks: angle brackets and ampersands must be escaped or they'll be parsed as tags and character references. The tool offers both named entities (&amp; &lt; &gt; — the human-readable form) and numeric entities (&#38; &#60; — the universal form that covers every Unicode codepoint, including emoji and CJK characters that have no named equivalent). Use named entities for the common five; use numeric for everything else. Decoding reverses the process: paste text scraped from a web page that's full of &nbsp; and &#8217; entities and get clean readable text back.