← All Tools
URL Encoder🔒 100% local
Encode URLs with percent-encoding. Privacy-first, no server uploads.
Related Tools
Percent-encodes the text you paste by running encodeURIComponent across the entire string. Every character outside the unreserved set is replaced with its UTF-8 byte escapes, which means the scheme separator, slashes, question mark, ampersand and equals signs are all escaped along with spaces and non-ASCII letters. Because it is a pure string function, the URL never leaves the page.
How to use it
- Paste the value you want encoded into the URL to Encode box.
- Press Encode.
- Copy Output gives you the escaped string ready to drop into a query parameter or a header value.
Worked example
https://example.com/a b?x=1&y=2becomeshttps%3A%2F%2Fexample.com%2Fa%20b%3Fx%3D1%26y%3D2note that ://, ? and = were all escaped, not just the space
hello world & youbecomeshello%20world%20%26%20youWhen to use it
- You are building a query string by hand and a value contains spaces, & or = that would otherwise break the parameter list.
- A callback or redirect URL has to travel as a parameter inside another URL, so the whole inner URL must be escaped.
- You need to see exactly which bytes a value will occupy on the wire when you suspect a non-ASCII character is causing a mismatch.
What it does not do
- Because the whole string is treated as one component, the output is not a usable URL: the colons and slashes are gone, so pasting the result into a browser address bar does nothing useful. If you want to keep the scheme and path readable and escape only the query values, encode the values separately instead.
- There is no encodeURI-style mode that leaves :/?#&= alone, and no character allowlist to keep a particular symbol unescaped.
- Letters, digits and the four characters A-Z a-z 0-9 - _ . ! ~ * ' ( ) pass through unchanged, which can surprise you if you expected a fully escaped string.
- It escapes rather than sanitises: a value containing a newline or a double quote is encoded, not rejected, so do not treat the output as proof that an input is safe.