Escape / Unescape
Escape and unescape HTML entities and special characters.
Escape/Unescape Reference:
- HTML: Convert <, >, &, quotes to entities
- JSON: Escape special characters for JSON strings
- URL: Percent-encode spaces and special characters
- CSV: Quote fields containing commas or quotes
About Escape / Unescape
Escape / Unescape converts characters like <, >, &, and " into their HTML entity equivalents (<, >, &, ") and back. This is essential for safely inserting user-supplied text into HTML to prevent XSS attacks, or for decoding HTML entities you encounter in scraped content. It also handles numeric entities and named entities for extended character sets.
Related Tools
Frequently Asked Questions
Is Escape / Unescape free?
Yes, completely free. No signup, no account, no usage limits. Use it as much as you need.
Is my data secure?
All processing happens directly in your browser using JavaScript. Your data is never sent to any server, stored, or shared. It stays entirely on your device.
What characters are escaped by default?
The five core HTML characters are escaped by default: & (ampersand), < (less-than), > (greater-than), " (double quote), and ' (single quote/apostrophe).
Can it decode numeric HTML entities like  ?
Yes. Both decimal ( ) and hexadecimal ( ) numeric entities are decoded correctly alongside named entities.