Security · free
HTML Escape / Unescape
Encode text into HTML entities to prevent breakage and injection, or decode entities back to plain text. Essential before pasting into pages.
About the HTML Escape / Unescape
Encode text into HTML entities to prevent breakage and injection, or decode entities back to plain text. Essential before pasting into pages.
Everything runs in your browser — nothing is uploaded.
How to use the HTML Escape / Unescape
- Step 1Paste your code.
- Step 2Press Format or Minify.
- Step 3Copy or download the result.
When people reach for this tool
Show the characters that are breaking your markup
An unescaped ampersand or angle bracket silently truncates the rest of a value.
Encode text before it goes into an attribute or a value
Escaping is the difference between text being displayed and text being interpreted.
Turn entities back into the characters they stand for
Decoding a copied snippet usually reveals what was there before it was encoded.
Practical tips
- Escape for the context you are writing into. Inside an attribute value, a quote character needs escaping too.
- Double escaping is a real risk — do not escape a string that has already been escaped, or your users will see the entities as literal text.
What you get
- Format and minify in one place
- Strings and comments kept safe
- Local processing
HTML Escape / Unescape — FAQ
Is my data safe?
Yes. Everything runs in your browser and nothing is uploaded to any server.
Is it really free?
Every Social-X tool is free, unlimited and works offline.
Why does my text break my page?
Unescaped characters are being read as markup. A bare ampersand or a stray angle bracket is enough to change how the rest of the document parses.
Does escaping make text safe to insert into a page?
It makes text safe to display as text. It is not a substitute for correct output handling elsewhere — scripts, URLs and styles each have their own rules.
More security tools
All 7 other tools in this collection — free, no sign-up, nothing uploaded.