HTML Escape Tool

Escape ampersands, angle brackets and quotes for safe HTML text display. Paste or type your text and the result updates instantly. Everything runs in your browser, so nothing is uploaded, nothing is stored, and there is no limit on how much text you can process.

What HTML Escape Tool does

The five characters that carry meaning in HTML — ampersand, less-than, greater-than and both quote marks — are replaced with their named entities. Escaping input before it reaches a page is the basic defence against cross-site scripting.

Your text never leaves your device

This tool is written in JavaScript and runs locally in the browser tab. No text is transmitted to a server, none is written to a log, and none is retained after you close the page. That makes it safe for drafts, client work and anything else you would rather not paste into an online form.

Why results can differ from other tools

Text processing involves judgement calls: what counts as a word, whether a hyphenated compound is one token or two, how a line ending is treated. Different tools resolve these differently, so a small discrepancy between this and a word processor is expected rather than an error.

Worked example

Run on a short sample so you can see exactly what changes before pasting your own text:

Produced by the same transformation the tool above applies.

Input	Output
<a href="x">Tom & Jerry</a>	&lt;a href=&quot;x&quot;&gt;Tom &amp; Jerry&lt;/a&gt;