URL Encoder & Decoder

URL encoding (also called percent-encoding) is the process of converting characters into a format that can be safely transmitted over the internet. URLs can only contain certain ASCII characters—letters, digits, and a few special symbols. When you need to include spaces, non-ASCII characters, or reserved symbols in a URL, they must be encoded using percent signs followed by hexadecimal values (e.g., space becomes %20).

Our URL Tools provide comprehensive encoding and decoding for URLs, query parameters, and URI components. Whether you're building query strings for API requests, encoding form data, parsing URLs to extract parameters, or debugging URL-related issues in web applications, this tool handles all encoding scenarios correctly and securely.

The tool supports both encodeURI (for complete URLs) and encodeURIComponent (for individual parameters), helps you build complex query strings with multiple key-value pairs, and parses existing URLs to show their components. All processing happens locally in your browser, ensuring your potentially sensitive URL parameters (like API keys or user tokens) never leave your device.

URL structure and encoding are defined by RFC 3986. For JavaScript-specific encoding functions, the MDN encodeURIComponent() documentation explains which characters are preserved. The WHATWG URL Living Standard defines how modern browsers parse and serialize URLs.

Encode URL (encodeURI): Encode an entire URL while preserving URL structure characters like :, /, ?, &, and =. This is useful when you have a complete URL with special characters in the path or query string. Use this when you need to embed a URL as a parameter in another URL, or when passing URLs through systems that might corrupt special characters.

Encode Component (encodeURIComponent): Encode individual URL parameters or path segments. This encodes ALL special characters including =, &, and ? which are structural parts of URLs. Use this when building query strings with user input, encoding form values, or preparing individual parameters for API requests. This is the most commonly needed encoding type.

Decode URL: Convert percent-encoded URLs back to readable format. This decodes all %XX sequences back to their original characters. Useful for reading encoded query parameters, debugging API responses that return encoded URLs, or making sense of encoded URLs in log files or browser address bars.

Parse URL Components: Break down a complete URL into its constituent parts: protocol (http/https), domain, port, path, query string, and hash fragment. This helps you understand URL structure, extract specific parts for processing, or verify that URLs are constructed correctly before sending HTTP requests.

Build Query String: Create properly encoded query strings from key-value pairs. Enter multiple parameters and the tool automatically encodes values and joins them with & separators. This ensures your query strings are correctly formatted and special characters in values don't break the URL structure.

Extract Query Parameters: Parse a query string to extract all key-value pairs. This is useful when analyzing URLs from analytics, debugging API requests, or extracting specific parameters from browser URLs. The tool shows all parameters in a readable format, making it easy to see what data is being passed.

Use encodeURIComponent for Query Parameters: When building query strings with user input or variable data, always use encodeURIComponent, not encodeURI. This encodes special characters like = and & that would otherwise break the query string structure. For example: ?name=encodeURIComponent(userName)&city=encodeURIComponent(userCity).

Use encodeURI for Complete URLs: When you need to encode an entire URL (for example, to pass it as a parameter to another service), use encodeURI. This preserves the URL structure (protocol, domain, path separators) while encoding only the characters that aren't valid in URLs. It won't encode characters like / : ? & = that are part of URL syntax.

Handle Spaces Correctly: Spaces in URLs should be encoded as %20 (percent-encoding) or + (in query strings for form data). Different contexts use different conventions. encodeURIComponent uses %20. When in doubt, use %20 as it works in all contexts. The + symbol should only be used in application/x-www-form-urlencoded form submissions.

Prevent Double-Encoding: Only encode values once. If you encode an already-encoded string, special characters get encoded multiple times (%20 becomes %2520), breaking the URL. Before encoding, check if the string is already encoded. When decoding, only decode once unless you know the value was intentionally double-encoded.

Reserved vs Unreserved Characters: Unreserved characters (A-Z, a-z, 0-9, -, _, ., ~) don't need encoding and should be kept as-is. Reserved characters (: / ? # [ ] @ ! $ & ' ( ) * + , ; =) have special meaning in URLs and should be encoded when used as data, not as URL structure. Understanding this distinction prevents encoding errors.

Security Considerations: Always encode user input before including it in URLs to prevent injection attacks. Malicious users might try to inject SQL, JavaScript, or other payloads through URL parameters. Proper encoding neutralizes these attacks by converting special characters to harmless percent-encoded sequences.

International Characters (Unicode): Non-ASCII characters (like Chinese, Arabic, emoji) must be encoded in URLs. They're converted to UTF-8 bytes, then each byte is percent-encoded. For example, "你好" becomes "%E4%BD%A0%E5%A5%BD". Modern browsers handle this automatically, but when building URLs programmatically, ensure proper encoding of international text.