URL Encode & Decode – and 11 More Formats

Encode and decode URLs, Base64, HTML entities, hex, binary, Unicode, JSON strings and Punycode – decode JWTs, turn files into Base64 and create SHA hashes, all in your browser.

  • URL and Base64
  • JWT decoder
  • SHA hashes
  • Never uploaded

Encoded and decoded in your browser – your data is never uploaded.

How to encode or decode text

  1. Choose a formatPick URL, Base64, HTML entities or another format, and whether to encode or decode.
  2. Paste your textThe result appears instantly. If your text already looks encoded, you’ll get a hint to decode it instead.
  3. Copy, swap or downloadCopy the output, swap it back into the input to reverse it, or download it. Decoded Base64 images and files can be previewed and saved.

Which encoding do I need?

FormatExampleUse it for
URLcafé & tea → caf%C3%A9%20%26%20teaQuery strings, links, form data
Base64Hi! → SGkhData URIs, email, APIs, embedding files
Base64URL+/= become -_JWTs and values inside URLs
HTML entities<b> → &lt;b&gt;Showing code or user text safely in HTML
Hex / binaryA → 41 / 01000001Debugging bytes and protocols
Unicode escapesé → \u00E9JavaScript, Java and JSON source code
Punycodemünchen.de → xn--mnchen-3ya.deInternational domain names and DNS

Frequently asked questions

What is URL encoding?

URLs can only contain certain characters, so others are written as % followed by two hex digits – a space becomes %20 and é becomes %C3%A9. Encode values you put in query strings so characters like &, = and ? don’t break the link.

What’s the difference between “component” and “full URL” encoding?

Component encoding (encodeURIComponent) also encodes / ? & = and #, which is right for a single query value or path segment. Full URL encoding (encodeURI) leaves those alone so a whole web address still works. Form encoding writes spaces as + like HTML forms do.

Is Base64 encryption?

No. Base64 just turns bytes into letters and numbers so binary data can travel as text – anyone can decode it. Use it for data URIs, email attachments and APIs, never to hide passwords.

Can I convert an image to Base64?

Yes. With Base64 selected, use “File to Base64” to turn any file into a data URI you can paste into HTML or CSS. Decoding Base64 that contains an image shows a preview and lets you download it.

How do I decode a JWT?

Choose JWT decode and paste the token. You’ll see the header, the payload (claims) and when it was issued and expires. The signature isn’t checked, so don’t rely on it to prove a token is genuine.

What is Punycode?

The way domain names with non-English letters are stored: münchen.de becomes xn--mnchen-3ya.de. It’s useful when setting up DNS records or checking suspicious look-alike domains.

Are SHA hashes reversible?

No. A hash is a one-way fingerprint – the same input always gives the same hash, but you can’t get the input back from it. Use them to check files or data haven’t changed. For passwords, use a slow algorithm like bcrypt or Argon2.

Is my text sent anywhere?

No. Everything is encoded and decoded in your browser.

Last updated: