Skip to content
Utilboxes

URL Decoder

Paste a percent-encoded URL or string to decode it to readable text, with %C3%A9 shown as é. A URL is also split into its scheme, host, path and a table of query parameters. If you still see % signs, it was encoded twice; repeat decoding unwraps every layer and reports how many. Nothing is uploaded.

Runs entirely in your browser

Updated

How to use the URL Decoder

  1. 1Paste the encoded URL or string.
  2. 2The decoded version appears immediately.
  3. 3If it is a URL, the parameter table below splits out each key and value.
  4. 4Use repeat decoding if the string was encoded more than once.

How it works

Percent-escapes are converted back to bytes and interpreted as UTF-8, so %C3%A9 becomes é rather than two broken characters.

When the input parses as a URL, it is also broken into its parts — scheme, host, path, and each query parameter as its own row. That is far easier to read than a long single line, particularly for tracking-heavy URLs with a dozen parameters.

Double-encoded strings turn up regularly, usually where a URL passed through a redirect that encoded it again. You can spot them by the %25 sequences, which are encoded percent signs. Repeat decoding unwraps each layer, and the tool reports how many it removed.

Everything runs in this page. Nothing you paste is transmitted, logged or stored, which is what makes it safe to drop a production payload in here while you are debugging.

Tips and common mistakes

  • Look for %25 in the input; it means the string was encoded more than once. Use repeat decoding.
  • Use the parameter table to read long tracking links one value at a time.
  • Check where a link really points before clicking it — decoding reveals redirect targets hidden in parameters.
  • Decoded text is shown as text only, so pasting a suspicious link here is safe.

Frequently asked questions

What does %20 mean?
A space. Percent-encoding writes each byte as % followed by its hex value, and 20 is the hex code for a space.
Why does my decoded text still contain % signs?
It was encoded more than once. Look for %25 — that is an encoded percent sign. Turn on repeat decoding to unwrap every layer.
Can I see the query parameters separately?
Yes. Anything that parses as a URL is broken into a table with each parameter decoded individually.
What does %2F mean?
An encoded forward slash, /. Every percent sign is followed by two hexadecimal digits for one byte.
How do I remove tracking parameters from a link?
Decode it, look at the parameter table, and rebuild the link without parameters such as utm_source or fbclid. Check that the link still works afterwards.
Is the URL sent anywhere?
No. It is decoded in your browser.
Share this toolShare on XShare on FacebookShare on LinkedInShare on RedditShare by email

Guides

Related tools

URL EncoderPercent-encode a whole URL or a single query parameter.Base64 DecoderDecode Base64 back to text or download it as a file.JSON FormatterPretty-print or minify JSON, with the exact error position.Timestamp ConverterUnix time to a readable date, in UTC and your local zone.