---
title: "HTML Entity Encoder & Decoder: Named or Numeric"
description: "Encode special characters as named or numeric HTML entities, or decode valid entity references back to text. Processing stays in your browser."
canonical_url: "https://webaloha.co/tools/html-entity-encoder-decoder/"
markdown_url: "https://webaloha.co/tools/html-entity-encoder-decoder.md"
date_modified: "2026-07-12T00:00:00.000Z"
---
# HTML Entity Encoder / Decoder
Last updated: Jul 12, 2026
Convert special characters to safe HTML entities, or decode entities back to readable text. Choose named or numeric output to prevent broken markup and protect against cross-site scripting in user-generated content.
Refer a Client, Earn 10% or $100
Use our tools for client work? When a client needs a website, SEO, or AI-search visibility, send them our way and earn 10% or $100, whichever is greater.
[How Referrals Work 🤝](https://webaloha.co/refer-a-client/)
## How the HTML Entity Tool Works
1. **Choose a mode**, Encode to escape characters, Decode to restore them.
2. **Pick output type**, named entities for readability or numeric for full Unicode coverage.
3. **Optional full escaping**, encode every non-ASCII character for maximum compatibility.
4. **Copy the result**, paste safe markup into your HTML, CMS, or templates.
## Why Entity Encoding Matters
- **Prevents XSS**, escaping user input stops injected scripts from running.
- **Fixes broken layouts**, raw < and & characters can break parsing and display.
- **Safe attributes**, encoding quotes keeps attribute values from terminating early.
- **Portable content**, numeric entities render reliably across encodings and email clients.
If unescaped user input is putting your site at risk, our [web design services](https://webaloha.co/web-design-services/) build secure front ends with proper output encoding baked in.
## Common HTML Entities Reference
Named entities are readable, while numeric entities work for any character and across legacy encodings. The five core characters at the top of the table must be escaped to keep markup safe and valid.
| Character | Named entity | Numeric |
| --- | --- | --- |
| **&** | `&` | `&` |
| **<** | `<` | `<` |
| **\>** | `>` | `>` |
| **"** | `"` | `"` |
| **'** | `'` | `'` |
| **non-breaking space** | ` ` | ` ` |
| **©** | `©` | `©` |
| **®** | `®` | `®` |
| **—** | `—` | `—` |
| **€** | `€` | `€` |
Next steps
## HTML Entity Encoder / Decoder related tools and articles
Continue with the closest follow-up checks and guides based on this tool's topic, crawl intent, and optimization workflow.
[
URL Encoder / Decoder
](https://webaloha.co/tools/url-encoder-decoder/)[
Base64 Encoder / Decoder
](https://webaloha.co/tools/base64-encoder-decoder/)[
HTML Minifier
](https://webaloha.co/tools/html-minifier/)[
Markdown to HTML Converter
](https://webaloha.co/tools/markdown-to-html-converter/)[
HTML to Markdown Converter
](https://webaloha.co/tools/html-to-markdown-converter/)[
Color Converter
](https://webaloha.co/tools/color-converter/)
## HTML Entity Encoder / Decoder: FAQ
What characters does Encode convert by default?
It always encodes ampersands, angle brackets, double quotes, and apostrophes. With named output selected, it also encodes the supported named non-ASCII characters in its built-in list, including copyright, trademark, euro, pound, yen, degree, and non-breaking space.
What changes when I enable numeric entities?
Supported characters are emitted as decimal numeric references such as & instead of named references such as &. Numeric mode also leaves ordinary non-ASCII characters unchanged unless Encode all non-ASCII is enabled.
What does Encode all non-ASCII do?
It converts every Unicode code point above ASCII 127 to a decimal numeric reference when no built-in named entity is available. Emoji and other supplementary characters are processed as whole code points, not split UTF-16 halves.
Which entity forms can Decode handle?
Decode recognizes semicolon-terminated named entities, decimal numeric references, and hexadecimal numeric references. References without a trailing semicolon and text that does not match those forms are left unchanged.
Why did encoding already encoded text produce &?
The encoder treats every ampersand as literal input, so running it on an existing & reference encodes that ampersand again. Decode first or start from the unencoded source when you want to avoid double encoding.
Does encoded HTML become safe to insert in every context?
No. Context matters. Encoding the five markup-sensitive characters is useful for HTML text and attribute values, but it is not a substitute for a trusted escaping or sanitization library for JavaScript, CSS, URLs, templates, or untrusted rich HTML.
What does Swap do in the HTML entity tool?
Swap moves the current output into the input and switches between Encode and Decode. It is convenient for checking a round trip, although decoding and re-encoding may choose a different named or numeric representation.
Is the text I paste uploaded anywhere?
No. Encoding and decoding run entirely in your browser using local JavaScript and a temporary textarea element. This tool does not send the pasted text to a Web Aloha server.
## Need a Secure, Well-Built Website?
We build fast, secure websites with clean markup, proper escaping, and strong technical foundations.
[Explore Web Design](https://webaloha.co/web-design-services/)