URL Encoder/Decoder
Format strings for web requests.
Encode
Decode
Standard
RFC 3986 (%20)
RFC 1738 (+)
Input String
Clear
https://example.com/search?q=<script>alert(1)</script>&id=123
Output String
Copy
AI Security Sandbox
Detect XSS, SQLi, and Traversal in decoded payloads.
Run Audit