QKitBoxHTML entities encoder & decoder
Escape text so it displays literally in HTML — or decode entities back to characters. Both directions, instantly.
Escape mode covers the five characters that must always be escaped in HTML (& < > " ') plus any non-ASCII character as a numeric reference.
How it works
Escaping replaces the five markup-significant characters (& < > " ') with their named entities, and maps other non-ASCII characters to numeric references (&#…;) so content survives any document encoding. Decoding resolves named and numeric references back to characters — handy when a CMS double-escapes content and you need to see the real text.
Frequently asked questions
Which characters must be escaped in HTML?
Only five are mandatory: & < > " and '. Everything else can appear literally in a UTF-8 document — numeric escaping is for safety in unknown-encoding contexts.
Why did my emoji become &#…;?
Escape mode numeric-escapes every non-ASCII character. Decode mode restores them exactly.
Written and maintained by Steven Huang · Last reviewed October 29, 2026.