Encoding Tools
4 free tools · 100% client-side
URL-encode and decode text, JSON, XML, and YAML safely with instant results — paste, convert and copy, entirely client-side in your browser.
Start here
Most-used Encoding Tools
URL Encode / Decode
Percent-encoding both ways — make any text safe in a URL, or turn %20-soup back into readable text.
JSON URL Encode
Put JSON in a URL safely — validated, percent-encoded, and decoded back to pretty-printed JSON.
XML URL Encode
Carry XML through URLs intact — well-formedness checked, percent-encoded, decoded back to formatted markup.
All 4 Encoding Tools
URL Encode / Decode
Percent-encoding both ways — make any text safe in a URL, or turn %20-soup back into readable text.
JSON URL Encode
Put JSON in a URL safely — validated, percent-encoded, and decoded back to pretty-printed JSON.
XML URL Encode
Carry XML through URLs intact — well-formedness checked, percent-encoded, decoded back to formatted markup.
YAML URL Encode
YAML through URLs without corruption — validated, percent-encoded, and restored to clean formatting on decode.
Learn more
Percent-encoding that understands your payload
URLs can only carry a narrow alphabet, so anything else — spaces, ampersands, non-ASCII text, entire JSON documents in a query parameter — must be percent-encoded. The plain URL Encode/Decode tool handles free text with correct UTF-8 semantics (one emoji becomes several %XX bytes, and decodes back to one emoji). The format-aware variants go further: JSON, XML, and YAML URL encoders validate the payload before encoding and after decoding, so a malformed document is caught at the tool instead of in production.
Decoding is forgiving where reality demands it: + is treated as a space (the form-encoding convention), uppercase and lowercase hex both decode, and malformed sequences produce a clear error rather than mojibake. As with everything here, encoding happens in your tab — tokens and payloads in your URLs never reach a server.
When you need this
The classics: building a callback or redirect URL that carries a return address, debugging why an API call with an & in a parameter truncates, passing a JSON filter object in a GET request, reading a SAML or OAuth parameter out of a captured URL, or crafting curl commands where the shell and the URL both want quoting. Paste the suspicious parameter into the decoder and the actual payload appears; encode the fixed version and paste it back.
Help
Frequently asked questions
Everything you need to know about the Encoding Tools.
01What's the difference between %20 and + for spaces?
%20 is the universal percent-encoding of a space and works everywhere in a URL. + means space only in the query string under the historical form-encoding convention. These tools emit %20 when encoding (always safe) and accept both when decoding (always practical).
02Why did my URL parameter get cut off at an ampersand?
An unencoded & starts a new parameter — everything after it stopped belonging to yours. Encode the value (the & becomes %26) and the full payload survives. The same applies to =, #, and ? inside values.
03Do these tools handle emoji and non-Latin scripts?
Yes — encoding is UTF-8 first, then percent-encoding, per the modern URL standard. Devanagari, Chinese, Arabic, and emoji all round-trip correctly; a decoder that shows them garbled is decoding as Latin-1, which these tools don't.
Learn the format
Guides for encoding tools
HTML Entities Explained: When to Escape &, <, > and Quotes
Which characters to escape in HTML text, attributes, URLs and scripts, how named, decimal and hex references differ, and why you keep seeing &amp;.
9 min readGuide · Web & APIsURL Encoding Explained: %20 vs +, Reserved Characters, When to Encode
What percent-encoding does, which characters are reserved, why forms use + for a space, and how encodeURIComponent, encodeURI and URLSearchParams differ.
9 min readGuide · Developer ToolsFreeFormatter Alternatives (2026): Where Its Tools Went
FreeFormatter.com has been retired and its tool pages now return 404. A verified map of where each formatter, validator, escaper and encoder moved.
6 min readGuide · Web & APIsWhat is Base64? Encoding Explained Without the Mystique
How Base64 works: 3 bytes become 4 characters, why the = padding exists, where it's used (JWT, data URIs, K8s secrets) — and why it's NOT encryption.
2 min readGuide · Web & APIsHow to Decode a JWT (and Why Decoding Isn't Verifying)
Decode any JWT in seconds: the three-part structure, Base64url quirks, code and no-code methods — and the critical difference between decoding and verifying.
2 min readGuide · Web & APIsHow to POST JSON with curl (Without Quoting Pain)
POST JSON with curl correctly: the Content-Type header, shell quoting on Linux/Mac vs Windows, sending from files with @, and pretty-printing responses.
2 min read