Browse HTML entities
Search every common HTML entity by name or character. One click copies the named, decimal, or hex form. All processing runs locally.
How to look up entities
Browse common HTML entities, filter by name or character, and copy the form you need.
- 01
Scan list
60+ frequently-used entities pre-indexed.
Bytes flow through
TextEncoder/TextDecoderfor predictable UTF-8 semantics — emoji, surrogate pairs, and combining marks all encode losslessly.browseUTF-8TextEncoderlosslessliverows · raw bytes60 · UTF-8amp lt gt …
loaded · UTF-8MIME · ready - 02
Filter
Type a fragment of the name or the actual character.
Hash and signature operations call
crypto.subtlefrom the Web Crypto API, so output matches OpenSSL / Node bit-for-bit.searchWeb Cryptosubtledeterministicliveq · optionscopy · livecopy → ©
options applied · livelive - 03
Pick a form
Named, decimal, or hex — all three are one click away.
Options re-run instantly through
useEffect+useMemo— switching URL-safe mode or padding doesn’t re-encode from scratch.formmemoisedoptionsinstantreactiveforms · encoded3 · ready© © ©
encoded · livelossless - 04
Copy
One click to clipboard.
Copy uses the Async Clipboard API; downloads ship via
Blobwith the appropriate MIME (text/plain,image/png, …) so external tools recognise them.copyclipboardblobMIME-correctclient-sideok · copiedready · doneCopied
shipped · ready to shipsuccess
Encoding without surprises
Always UTF-8 first
Use TextEncoder / TextDecoder for bytes ↔ string conversion. btoa alone breaks on non-ASCII.
URL-safe vs standard Base64
Standard uses +, /, =; URL-safe swaps to -, _, no padding. Don’t mix them.
Hashes aren’t passwords
SHA-256 is fast; that’s good for fingerprints, bad for passwords. Use bcrypt / argon2 for credentials.
Watch padding rules
Some decoders are strict about = padding, others auto-pad. If round-trips fail at exactly 1 or 2 bytes, check padding.
Use Web Crypto for keys
Generate cryptographic keys via crypto.subtle, never Math.random. The latter is predictable.
JWT decode ≠ verify
Decoding a JWT just splits and base64-decodes. Verification needs the issuer’s public key / shared secret.
When to reach for entity lookup
Typography, accessibility, content writing.
Smart punctuation
Insert curly quotes, em-dashes, ellipses correctly. Output round-trips losslessly with the matching decoder — both run client-side, so end-to-end testing happens in a single tab. Encoding flows through TextEncoder for predictable UTF-8 semantics.
RFC-compliantMath symbols
≤ ≥ ≠ ∞ √ in static HTML without webfonts. Web Crypto's subtle.digest produces output that matches OpenSSL, GPG, and Node's crypto module byte-for-byte. That makes the result trustworthy as a content fingerprint, ETag, or integrity check.
OpenSSL-matchedCopyright marks
© ® ™ for footers and bylines. Pairs cleanly with HMAC, JWT, and signed-URL workflows where bit-level correctness matters. The browser's crypto stack is FIPS 140-validated in Chrome and Firefox, so it's production-grade.
losslessSource examples
Show literal < and & in code samples. Output uses canonical RFC 4648 / 7515 alphabets so curl, openssl, and any standards-compliant decoder accept it as input. URL-safe variants drop padding for tokens that travel in query strings.
byte-identicalEmail templates
Older clients prefer entities over UTF-8. Heavy hashing runs through useMemo so large inputs don't block typing. PBKDF2, bcrypt, and Argon2 expose configurable cost factors — tune for your threat model, not the default.
spec-gradeInternationalisation
Diacritics, arrows, fractions — no extra fonts. Same input plus same options always yields identical bytes. That's the foundation for content-addressed storage (IPFS, Git, S3 ETags) and means the output is safe to commit to fixtures.
i18nFrequently asked questions
Something missing?
Tell us what you need. We ship the top requests every two weeks.