ToolzyLab ToolzyLab

URL Encoder / Decoder

Encode or decode any URL safely and instantly. Clean messy links, convert reserved characters, inspect URL parts, review query parameters, and copy or download the final result directly in your browser.

Fast, Safe & Easy URL Utility

Paste a raw link, encoded URL, query string, or file content and instantly convert it the way you need. Great for developers, SEO work, redirect testing, APIs, tracking links, and debugging broken URLs.

๐Ÿ”— Encode URLs ๐Ÿ”“ Decode URLs ๐Ÿงช Auto Detect ๐Ÿ“ฆ Query Parser ๐Ÿ“„ Upload Files ๐Ÿ”’ Browser Only
๐Ÿ”—

Drop URL text file here

Paste a URL, encoded string, query string, or upload a .txt file to process instantly.

๐Ÿ“„ .txt ยท โšก instant convert ยท ๐Ÿ” parse URL parts ยท ๐Ÿ“ฅ download result ยท ๐Ÿ”’ no upload

Encoder / Decoder Controls

Choose full URL mode or component mode, then encode, decode, analyze, copy, or download the result.

๐ŸŸก Waiting for URL input
Ready. Paste a URL or encoded string to begin.
StatusWaiting
ActionAuto
Characters0
Output Size0
Search Matches0
URL Params0

Input & Converted Output

Use the left side for raw input and the right side for the encoded or decoded result.

No action yet Line 1, Col 1

Input

Editable 0 chars
1
Ready for input No file loaded
Detection idle

Output

Result preview 0 chars
1
No output yet 0 matches
Ready to download

URL Analysis

Quickly inspect protocol, host, path, query string, hash, and decoded parameter values.

Run the tool or click Analyze URL to see parsed URL parts here.

Best practice

Use URL Component mode when encoding pieces like search terms, query values, tokens, or slugs. Use Full URL mode when you want to preserve the main link structure but safely encode the parts that need escaping.

This tool runs fully in your browser. Nothing is uploaded, stored on our server, or sent anywhere.

Result Snapshot

See what happened to the current result, including structure, characters, and encoded signs.

Snapshot idle
Detected Typeโ€”
Percent Signs0
Plus Signs0
Has QueryNo
Has HashNo
Output Size0 B

Keyboard shortcuts

  • Ctrl + Enter process URL
  • Ctrl + K analyze URL
  • Tab keeps focus in editor naturally

What this tool does

It can encode unsafe characters, decode already-encoded strings, auto-detect likely encoded input, show output in a clean scrollable box, parse query parameters, and help you inspect URLs without turning the whole page into a giant scroll mess.

Percent encoding for individual URI components

Encode a URL component without accidentally escaping delimiters or decoding reserved characters too early

Percent encoding represents bytes that are not allowed or would have special meaning in a URI component. Choose encode or decode, whole-URL or component mode, space behavior, repeat count, and cleanup from the exact destination, then inspect percent signs, slashes, question marks, ampersands, equals signs, fragments, and UTF-8 characters.

Component scope

Path segments, query values, fragments, and complete URLs do not share one safe character set

Encoding an entire URL can hide structural delimiters such as colon, slash, question mark, ampersand, and equals. Encode dynamic values before assembling them into the URL with a URL API. A query parameter value and a path segment may require different treatment, especially for slash and plus.

Spaces and Unicode

Spaces can appear as percent-encoded bytes or plus signs under form conventions

General URI percent encoding commonly uses %20, while application/x-www-form-urlencoded uses plus for spaces and encodes literal plus separately. Non-ASCII text should first become UTF-8 bytes and then percent-encoded. The receiving framework's parser determines the correct convention.

Decode depth

Do not encode or decode the same data repeatedly without a defined layered protocol

Double encoding turns a percent sign into %25 and can create values such as %252F. Repeated decoding can reveal reserved delimiters and alter path or query interpretation. Decode after separating URI components, validate the result, and protect against traversal or redirect vulnerabilities in application code.

Practical review

URL encoding check

Parse and test the generated URL with the same API or server that will receive it.

  • Identify the exact path segment, query key, query value, fragment, or whole URL.
  • Preserve structural delimiters and encode dynamic component data before assembly.
  • Choose %20 or plus behavior according to the receiving form/query convention.
  • Use UTF-8 and avoid accidental double encoding or repeated decoding.
  • Validate redirects, paths, hosts, and decoded input in application security controls.

Technical references: RFC 3986 URI syntax

URL encoding questions

Components, percent triplets, spaces, plus signs, Unicode, double encoding, and URL APIs

Should I encode a complete URL or only its values?

Usually encode dynamic components such as a query value or path segment, then assemble them with a URL API. Encoding the whole URL can hide required delimiters.

What is the difference between %20 and plus for spaces?

%20 is the percent-encoded space byte. Plus represents space in form-style query encoding, where a literal plus must be encoded separately.

Why does percent encoding use two hex digits?

Each percent triplet represents one byte as a percent sign followed by two hexadecimal digits. Unicode text commonly produces several UTF-8 byte triplets.

What is double URL encoding?

It occurs when an already encoded percent sign is encoded again, so %2F becomes %252F. Decode or encode only at the defined application boundary.

Why can decoding a reserved character change a URL?

Reserved characters act as URI delimiters. Decoding them before parsing components can turn data into structure and change routing or query meaning.

Can URL encoding make an unsafe redirect or path safe?

No. Applications must validate allowed schemes, hosts, paths, and decoded values. Encoding is representation, not authorization or sanitization.