Skip to content
Aback Tools Logo

Percent-Encoding Decoder

Decode percent-encoded (URL-encoded) text or files instantly. The Percent-Encoding Decoder converts %XX sequences back to their original characters, handles + as space (form-urlencoded convention), detects multi-byte UTF-8 percent-encoded sequences, and shows both the raw and decoded versions side-by-side with a detailed character breakdown. All processing runs locally in your browser - no data uploaded, no signup required.

Percent-Encoding Decoder

Paste percent-encoded (URL-encoded) text or upload a file to decode it. The tool decodes %XX hex sequences, handles + as space (form-urlencoded convention), recognizes multi-byte UTF-8 percent-encoded sequences, and shows both the raw and decoded versions side-by-side with a detailed character breakdown. All processing runs locally in your browser.

0 characters

How Percent-Encoding Decoding Works

The Percent-Encoding Decoder scans every character in your input looking for%XX hex sequences (where XX is a two-digit hexadecimal value) and +characters. Each valid %XX sequence is decoded to its corresponding byte value, and + is converted to a space (the application/x-www-form-urlencodedconvention). The tool also detects multi-byte UTF-8 percent-encoded sequences- for example, %E2%82%AC (3 bytes) decodes to the € character. The decoded result is shown alongside the original encoded input, with a color-coded character breakdown showing which characters were encoded, their categories, and their Unicode code points.

Why Use Our Percent-Encoding Decoder?

Complete %XX Sequence Decoding

Decodes all percent-encoded (URL-encoded) sequences including single-byte values like %20 (space), %21 (!), %23 (#), and multi-byte UTF-8 sequences like %E2%82%AC (€). Handles RFC 3986 compliant percent-encoding with proper validation of hex digits and rejection of malformed sequences.

Side-by-Side Encoded vs Decoded View

View the original percent-encoded input and the fully decoded output side-by-side for easy comparison. Both panels support one-click copy, making it simple to grab the decoded result for use in your applications, scripts, or data processing workflows.

Detailed Character & Pattern Analysis

Get a color-coded character-by-character breakdown showing which characters were encoded, their decoded values, Unicode code points, and character names. The encoding patterns table groups identical %XX sequences together with counts and percentages, helping you understand the composition of your encoded data.

100% Private Browser-Based Processing

All percent-encoding decoding happens entirely in your browser. Your data is never uploaded to any server - it never leaves your device. No signup, no account, no data collection, no usage limits. Supports both text input and file upload (.txt, .html, .url, .csv, .xml, .json, .md).

Common Use Cases for Percent-Encoding Decoder

Debugging URL Parameters

Web developers frequently encounter percent-encoded URLs in browser address bars, server logs, and API documentation. Decode query string parameters to read their actual values, debug malformed URLs, and verify that encoding works correctly across different browsers and web frameworks.

Form Data Recovery

When HTML forms use the application/x-www-form-urlencoded content type, special characters in form fields are percent-encoded before submission. Use the decoder to recover the original form data from encoded submissions, inspect hidden fields, and debug form processing issues.

Security & Threat Analysis

Security analysts can decode percent-encoded payloads in web requests, log files, and security alerts. Many web attacks (XSS, SQL injection, path traversal) use percent-encoding to hide malicious payloads. Decoding these reveals the actual attack strings and helps in threat analysis and incident response.

API & Webhook Debugging

API responses and webhook payloads often contain percent-encoded data, especially in URL parameters, redirect URLs, and callback URLs. Decode these to inspect the actual values being passed, verify API integrations, and debug callback URL construction.

Data File Processing

CSV files, log files, and data exports sometimes contain percent-encoded fields. Decode entire files in one operation to recover the original text content, making the data readable and usable for analysis, import into databases, or further processing.

Learning & Education

Students learning web technologies can use the decoder to understand how URL encoding works. See how different characters are encoded, explore multi-byte UTF-8 percent-encoding sequences, and understand the difference between RFC 3986 encoding and form-urlencoded conventions.

Understanding Percent-Encoding

What Is Percent-Encoding?

Percent-encoding, also known as URL encoding, is a mechanism for encoding information in a Uniform Resource Identifier (URI) under certain circumstances. Characters that are not allowed in a URI - such as spaces, non-ASCII characters, and characters with special meaning like ?, &, #, and %itself - are replaced with a %character followed by two hexadecimal digits representing the character's byte value. For example, a space character (ASCII 32, hex 20) is encoded as %20. The + character is also used as a space replacement in application/x-www-form-urlencoded form data (the HTML form encoding standard), where spaces in form field values are encoded as + rather than %20. Percent-encoding is defined by RFC 3986 (Uniform Resource Identifier) and is universally supported by all web browsers, servers, and HTTP libraries.

Common Percent-Encoded Characters

  • %20 (Space): The most common percent-encoded character. Spaces are not allowed in URLs, so every space in a URL or query parameter must be encoded. In form data, spaces may also be encoded as +.
  • %21 to %2F (Punctuation): Characters like ! (%21)," (%22), # (%23),$ (%24), % (%25), &(%26), ' (%27), ( (%28),) (%29), * (%2A), +(%2B), , (%2C), and / (%2F).
  • %3A to %40 (More Punctuation): Including : (%3A),; (%3B), < (%3C),= (%3D), > (%3E),? (%3F), and @ (%40).
  • %5B to %60 and %7B to %7E: Bracket characters [ (%5B),\\ (%5C), ] (%5D), ^(%5E), ` (%60), { (%7B),| (%7C), } (%7D), and ~(%7E).
  • Multi-byte UTF-8 Sequences: Non-ASCII characters (Unicode) are first encoded as UTF-8 bytes, then each byte is percent-encoded. For example, the Euro sign € (U+20AC) encodes as %E2%82%AC (3 bytes), and emoji like 😀 (U+1F600) encode as %F0%9F%98%80 (4 bytes). Our tool automatically detects and decodes these multi-byte sequences.

How Our Percent-Encoding Decoder Works

  1. Input Scanning: The tool scans every character in your input text, identifying %XX sequences (where X is a hexadecimal digit 0-9 or A-F) and+ characters. Each %XX sequence is validated for proper hex format, and malformed sequences are flagged and passed through as literals.
  2. Multi-byte UTF-8 Detection: After finding a valid %XX byte, the tool checks if it forms a multi-byte UTF-8 sequence by examining subsequent bytes. A byte in the range 0xC0-0xDF starts a 2-byte sequence, 0xE0-0xEFstarts a 3-byte sequence, and 0xF0-0xF7 starts a 4-byte sequence. If the following bytes are valid continuation bytes (0x80-0xBF), the full Unicode code point is decoded. Otherwise, each byte is decoded individually.
  3. Segmentation & Analysis: Each character in the output is tagged with metadata: whether it was encoded or literal, the original encoded representation, its Unicode code point, and a human-readable character name. Identical encoding patterns are grouped and counted, providing a comprehensive picture of what was encoded and how often.

Privacy, Limitations & Best Practices

Our Percent-Encoding Decoder processes everything locally in your browser. Text input and uploaded files are read using the browser's APIs and analyzed entirely in memory - no data is ever uploaded to any server. The tool is 100% free with no signup, no account, and no usage limits.

Supported input: Text pasted directly or uploaded from files (.txt, .html, .htm, .url, .csv, .xml, .json, .md) up to 10 MB. The tool detects both single-byte percent-encoding and multi-byte UTF-8 percent-encoding sequences. It also handles the+ to space conversion used in application/x-www-form-urlencoded form data.

Limitations: The tool decodes percent-encoding only - it does not encode text. For encoding, use a dedicated URL encoder. Very large files (over 10 MB) may cause browser memory issues. Binary files that are not valid UTF-8 may produce replacement characters (U+FFFD) when decoded as text. The character breakdown display shows up to 1,000 characters for performance.

Related Tools

Steganography Detector

Upload an image to detect potential hidden data using LSB (Least Significant Bit) steganography analysis. Analyzes pixel-level modifications, shows a heatmap of altered pixels, detects statistical anomalies, and extracts hidden text messages if found. Compatible with standard LSB encoding and the STEG magic header format. All processing happens locally in your browser - free online steganography detector, no signup required.

Image File Size Analyzer

Upload any image to see a detailed binary-level breakdown of what contributes to its file size - pixel data, compression overhead, metadata (EXIF/IPTC/XMP), color profiles (ICC), and structural headers. Get prioritized optimization tips with estimated savings for web performance, mobile app optimization, and storage reduction. Supports JPEG, PNG, GIF, WebP, BMP, TIFF, AVIF, and HEIC - all processing runs locally in your browser, no server upload required. Free online image file size analyzer.

File Magic Byte Detector

Upload any file to instantly detect its true file type by reading the magic bytes (file signature / header). The tool bypasses incorrect file extensions and reveals the real format. Shows hex dump with matching signature bytes highlighted, ASCII interpretation, MIME type, file category, and extension match analysis. Supports over 120 file signatures across 16 categories: images, audio, video, documents, archives, executables, fonts, certificates, disk images, and more. All processing runs locally in your browser - free online File Magic Byte Detector, no signup required.

Image Clone Detector

Detect copy-move forgeries in images using pixel-block matching. Upload any image to find cloned/copied regions, view heatmap overlays showing the location and intensity of detected clones, and get confidence scores with region details. Three sensitivity presets for different detection needs. 100% private browser-based processing - free online Image Clone Detector.

Frequently Asked Questions About Percent-Encoding Decoder

Percent-encoding, also called URL encoding, is a method of encoding characters in URLs that are not allowed in their raw form. Special characters like spaces, ?, &, #, and %, as well as non-ASCII characters, are replaced with a % sign followed by two hexadecimal digits representing the character's byte value. For example, a space becomes %20, and the Euro sign € becomes %E2%82%AC (a 3-byte UTF-8 sequence).

Both %20 and + represent spaces, but they come from different standards. %20 is the RFC 3986 standard percent-encoding for a space character (ASCII 32, hex 20). The + character is used as a space in the application/x-www-form-urlencoded content type (HTML form submission). Our tool decodes both: %20 → space and + → space.

The tool detects multi-byte UTF-8 sequences by examining consecutive %XX bytes. A byte starting with bits 110xxxxx (0xC0-0xDF) begins a 2-byte sequence, 1110xxxx (0xE0-0xEF) begins 3 bytes, and 11110xxx (0xF0-0xF7) begins 4 bytes. If the following bytes are valid continuation bytes (10xxxxxx, 0x80-0xBF), the full Unicode code point is decoded. For example, %E2%82%AC decodes to the € character, and %F0%9F%98%80 decodes to 😀.

If a % character is not followed by exactly two valid hexadecimal digits (0-9, A-F), the % is passed through as a literal character. For example, %GG would be treated as literal text since GG is not a valid hex value. The tool reports the number of invalid sequences found and includes them in the analysis notes for your awareness.

Absolutely. All percent-encoding decoding happens entirely within your browser. Text you paste and files you upload are read, decoded, and analyzed locally - no data is ever sent to any server. Your data never leaves your device. No signup, no account, no data collection, no usage tracking.

Yes - switch to the Upload File tab to select a text file containing percent-encoded data. Supported file types include .txt, .html, .htm, .url, .csv, .xml, .json, and .md. Files up to 10 MB are supported. The tool reads the file, decodes all percent-encoded sequences, and displays the result alongside the original encoded content.

In the Character Breakdown visualization, each character is color-coded: green backgrounds indicate percent-encoded characters, blue indicates space encoding (%20), amber indicates + → space conversion, red indicates control characters, purple indicates Unicode/multi-byte sequences, and uncolored characters are literals. Hover over any character to see its encoded value, decoded value, Unicode code point, and character name.

No - this tool is a decoder only. It converts percent-encoded text back to its original form. For encoding text into percent-encoding (URL encoding), you'll need a dedicated URL encoder tool. The decoder focuses on providing comprehensive analysis of what was encoded and how, with detailed statistics and character-by-character breakdowns.

Yes - 100% free, forever. No signup, no account, no premium tier, no usage limits, and no ads. Decode as much text and as many files as you need. All processing is done locally in your browser with zero server uploads.