Loading your tools...
Loading your tools...
Escape special characters to HTML entities or decode entities back to readable text.
Loading Tool...
Paste raw text or markup in the Escape panel to generate entity-safe output.
Paste entity-encoded text in the Unescape panel to recover readable text.
Copy the result for templating, CMS input, or QA checks.
Verifying safe output before inserting user-generated content into HTML
Converting escaped content back to readable text during migrations
Comparing framework auto-escaping behavior against expected output
Troubleshooting rendering issues in email templates and CMS blocks
Escaping converts characters with special meaning in HTML into entity forms, so they are displayed as text instead of interpreted as markup. This is a foundational protection pattern against injection issues.
Unescaping is the reverse operation. It is useful when content is stored or transported in encoded form and needs to be displayed or compared in readable text.
Escape on output boundaries where HTML is rendered, and keep raw source data unchanged when possible.
Most workflows at minimum escape `<`, `>`, `&`, double quotes, and apostrophes. Depending on context, additional characters may also be encoded using numeric entities.
If rendering still looks wrong after escaping, inspect whether content was escaped twice. Double-escaped text often appears with `&lt;` patterns.
Convert special characters to HTML entities and decode entities back to readable text.