Text String Obfuscator

Obfuscate text locally with homoglyphs, zero-width characters, or numeric HTML entities, then decode common patterns in the browser.

Last reviewed: June 2026

New to this tool? Click here for instructions

Input Text
Obfuscated Output
Paste text above to obfuscate.

How to use the String Obfuscator

Choose one of the four modes, paste text into the input area, and the output updates immediately. Homoglyphs mode replaces selected Latin letters with look-alike Unicode characters. Zero-Width mode inserts invisible characters between visible characters. HTML Entities mode emits numeric character references. Decode mode strips common zero-width characters, decodes numeric entities, and maps known homoglyphs back to their base letters where possible.

The tool does not send text to an external API. Each transform is a local JavaScript operation in the current browser tab, which is useful when you are testing Unicode handling in UI components, search filters, copy/paste flows, moderation tools, or markup renderers.

Authorized uses and safety notes

Use this page for defensive testing, accessibility review, text rendering QA, watermark experiments, and Unicode education. Do not use obfuscation to evade platform rules, hide malicious links, impersonate trusted brands, or bypass security controls. Homoglyphs and zero-width characters can make text misleading to humans while still looking ordinary on screen.

When testing application defenses, log both the raw code points and the displayed text. A payload that looks like paypal.com may contain Cyrillic or Greek characters, and a copied string may include invisible code points that break exact-match filters.

Mode reference

String Obfuscator modes and limits
ModeWhat it changesReversible?Best use
HomoglyphsSelected Latin letters become look-alike Unicode charactersPartlySpoofing and rendering tests
Zero-WidthInvisible code points are inserted between charactersYes, for known zero-width charactersCopy/paste and filter robustness tests
HTML EntitiesCharacters become numeric HTML character referencesYes, after HTML/entity decodingMarkup parser and scraper tests
DecodeStrips zero-width characters, decodes numeric entities, maps known homoglyphsBest effortInspecting suspicious or confusing strings

Worked example

Paste Hello World! and choose HTML Entities. The output becomes numeric character references such as Hel. Switch to Decode, paste that output back into the input, and the browser reconstructs Hello World!.

For a harder case, choose Homoglyphs and compare the displayed result with each character's code point in Unicode Inspector. That exposes why visually similar text can fail equality checks or evade naive string matching.

Useful references: Unicode UTS #39 Security Mechanisms, MDN HTML entity glossary, and WHATWG named character references.

Frequently Asked Questions

No. All transformations run locally in the browser with JavaScript.
Homoglyphs can make two different code points look nearly identical. That matters for usernames, domains, labels, security warnings, and moderation systems.
No. Decode mode can strip known zero-width characters and decode numeric entities, but homoglyph recovery is best effort and can be ambiguous.
No. They have legitimate text-shaping and formatting uses, but they can also confuse search, copy/paste, and exact-match checks when inserted unexpectedly.
No. Obfuscation is not encryption, access control, or redaction. Use it for testing and education, not for protecting secrets.