# HTML Entities

Canonical: https://dev.eneawork.it/html-entities
Language: en
Updated: 2026-11-02
Author: Enea Zani (https://eneawork.it)

Escape and unescape HTML entities safely.

## What it does

HTML entities let you display characters that would otherwise be interpreted as markup. Encoding &, <, >, quotes and non-ASCII characters prevents broken output and injection bugs. Decoding turns &amp;, &#233; and named entities back into readable text. This is a text utility, not a full HTML sanitizer.

## How to use

1. Choose encode or decode.
2. Pick minimal escaping or all non-ASCII.
3. Copy the result or swap it back.

## FAQ

### Is escaping enough to prevent XSS?

Not always. Context matters: HTML text, attributes, URLs and JavaScript need different escaping. Use a reputable sanitizer for rich HTML.

### Named vs numeric entities?

Named entities use mnemonics such as &amp; or &euro;; numeric entities use decimal or hex code points. Browsers understand both.

### Does it alter emoji?

In all mode, emoji become numeric entities; decoding restores them exactly.

## Related tools

- [URL Encoder](https://dev.eneawork.it/url-encoder)
- [Base64 Encoder](https://dev.eneawork.it/base64)
- [Text Diff](https://dev.eneawork.it/text-diff)

## Machine-readable

- Tool catalogue: https://dev.eneawork.it/tools.json
- Full AI context: https://dev.eneawork.it/llms-full.txt
- Privacy: https://dev.eneawork.it/privacy
- This page in HTML: https://dev.eneawork.it/html-entities
- Italian version: https://dev.eneawork.it/it/html-entities