URL encoder for Next.js & Supabase URLs. In your browser.

Encode and decode components, whole URIs or form values. Parse callback URLs into fields and a query table without opening them — free, no sign-up.

Loading the tool…

Native JavaScript URI and URL semantics. Parsing does not validate reachability, authorization or redirect safety; input limit 200 KB.

How to use

  1. Paste text to encode or decode, or an absolute URL to parse. Use disposable samples without credentials.
  2. Choose component, whole URI or query-value mode for Encode/Decode; choose Parse URL for fields and query rows.
  3. Review decoded query values, including duplicate keys, then copy or download locally. Parsing never visits the URL.

Reference documentation

Frequently asked questions

Is this free, and does anything leave my browser?

Free, no sign-up. Inputs and outputs stay in your browser, with no processing endpoint or upload. Copy and download are local. Usage events contain only a fixed tool name and action, never your data.

Should I use encodeURI or encodeURIComponent?

Use encodeURIComponent for an individual path/query value: it escapes reserved separators. encodeURI keeps URI separators such as colon, slash, question mark and ampersand, so it is intended for a whole URI.

Why does plus sometimes mean a space?

Form query-value mode treats plus as space when decoding and emits plus for spaces when encoding. Component mode preserves a literal plus when decoding. URLSearchParams uses form semantics when parsing queries.

Are duplicate query parameters lost?

No. The parser displays every key/value pair in order, including repeated keys and empty values. Treat repeated filters or callback values according to your application's contract.

Does decoding happen more than once?

No. Each click decodes once. Percent-encoded percent signs may leave another encoded sequence in the result; only decode again if your data contract calls for it. Malformed escapes are reported.

Does parsing validate that a URL is safe?

No. Native URL parsing normalizes syntax, not trust. The tool never opens the URL. Independently check origins, allowed schemes and redirect destinations in your app; never paste live credentials.

Related tools

All free tools

Read this page as Markdown