HTML Entity Encoder
Escape angle brackets, quotes, and ampersands so markup renders as text, or reverse it.
Output appears here
Copies a link that reopens this tool with your input.
Common questions
Does escaping HTML make my site safe from XSS?+
It is one necessary piece, not a complete defence. Escaping the five HTML characters protects text in element content and quoted attributes; URLs, inline scripts, and style contexts each need different handling.