100% Client-Side

HTML Entity Decoder

Decode HTML entities back to their original characters

Free Client-Side No Login No Storage
Loading tool...
HTML Entity Encoder Escape HTML special characters to prevent XSS and display issues URL Decoder Decode percent-encoded URLs back to readable query strings Base64 Decoder Decode Base64 strings back to plain text or binary data

How to Use the HTML Entity Decoder

  1. Paste HTML with entities (e.g. &, <) into the input.
  2. Click Decode to convert back to original characters.

Decodes all named HTML entities (&, <, >, etc.) and numeric entities (&, &) back to their original characters.

What is HTML Entity Decoding?

HTML entity decoding converts encoded HTML representations (such as `&`, `<`, `>`, `"`, and `'`) back into their literal human-readable characters (&, <, >, ", '). It decodes named character entities, decimal numeric entities (`A`), and hexadecimal entities (`A`), making it essential for rendering raw text from database extracts and web scrapers.

Common Uses

  • Decoding raw web scraper output or RSS feed entries into plain text
  • Restoring sanitize-escaped user inputs before generating PDF or spreadsheet reports
  • Inspecting encoded HTML snippets during web vulnerability and XSS assessments
  • Formatting API payloads that return HTML-entity encoded strings

Frequently Asked Questions

What is the difference between named and numeric entities?

Named entities use short mnemonics (like `©` for the copyright symbol), while numeric entities reference Unicode code points directly in decimal (`©`) or hexadecimal (`©`). This tool decodes all three varieties automatically.

Can decoding HTML entities introduce XSS security risks?

Yes. If you decode HTML entities and immediately inject the unescaped result into an application DOM using `innerHTML`, any embedded `