HTML Entities Cheat Sheet: Complete Reference Guide

Ever typed a < in your HTML and watched your entire page break? Congratulations, you've just discovered why HTML entities exist! They're the escape hatches that let you display characters the browser would otherwise try to interpret as code.

What Are HTML Entities, Anyway?

An entity is a string that starts with & and ends with ;. It tells the browser: "Hey, don't try to interpret this — just display this specific character." They come in two flavors:

• Named entities: Human-readable, like & for &, < for <, © for ©
• Numeric entities: Unicode code points — decimal (©) or hex (©)

All three of ©, ©, and © render the same thing: ©. Named entities are easier to read in source code, but numeric ones work for any Unicode character.

The Big Five: Characters You MUST Escape

These five characters have special meaning in HTML. If you use them as plain text without escaping, things will break:

Your Go-To Symbol Reference

Currency Symbols

Typography Essentials

Arrows

Math Symbols

The Invisible Characters

HTML collapses multiple spaces into one. These entities give you precise whitespace control:

Encoding & Decoding in JavaScript

Here's a neat trick — let the browser do the work:

// Encode: text → HTML entities
function encodeHTML(text) {
  const div = document.createElement('div');
  div.textContent = text;
  return div.innerHTML;
}

encodeHTML('<script>alert("xss")</script>');
// "&lt;script&gt;alert(&quot;xss&quot;)&lt;/script&gt;"

// Decode: HTML entities → text
function decodeHTML(html) {
  const div = document.createElement('div');
  div.innerHTML = html;
  return div.textContent;
}

Do I Even Need Entities in 2026?

With modern UTF-8 encoding (which you should always use), you can type most characters directly. You only need entities when:

• Reserved characters: Always escape &, <, > in text, and " in attributes. Non-negotiable.
• Invisible characters: Non-breaking spaces and zero-width joiners — you can't see them in source code, so entities make your intent clear.
• Characters not on your keyboard: When you need a specific symbol and can't easily type it.
• User-generated content: Always encode to prevent XSS attacks.

For accented characters, emoji, and international text — just type them directly with <meta charset="UTF-8"> in place.

Wrapping Up

HTML entities are one of those things every web developer needs to know. The Big Five reserved-character entities are non-negotiable for correctness and security. Beyond that, entities give you a portable way to include symbols, typography, and invisible spacing in your markup. Bookmark this page — you'll be back.