URL Decoder

Turn percent-encoded text back into something you can read. Codes such as %20, %26 and %3D become spaces, ampersands and equals signs again.

How to use it

1. Paste the encoded text.
2. Click Decode.
3. Read or copy the result.

When it helps

• Reading long tracking or affiliate addresses
• Checking what a redirect or callback parameter really contains
• Debugging API requests and log files
• Understanding the search terms recorded in analytics

Double encoding

If the result still contains codes like %20, the text was encoded twice. Simply decode it a second time.

Decoding vs parsing

Decoding makes the characters readable. To split an address into scheme, host, path and parameters, use our URL Parser afterwards.

Stay cautious

Decoding reveals what a link contains but does not make it safe. Phishing addresses often hide their real destination inside encoded parameters — decode first, then think before you click.

Limitations

The tool handles standard percent-encoding. Other formats such as Base64 need a different decoder.

A worked example

A support agent receives an error report containing redirect=%2Faccount%2Forders%3Fid%3D1042. Decoding shows it means /account/orders?id=1042, so the agent immediately knows which page and order caused the problem.

Common codes at a glance

• %20 space · %21 ! · %23 # · %26 &
• %2F / · %3A : · %3D = · %3F ?
• %40 @ · %25 % (a sign of double encoding when followed by two digits)

Reading analytics data

Search terms, campaign names and landing pages in analytics reports are often stored encoded. Decoding them makes reports easier to read and share with colleagues.

In code

• JavaScript: decodeURIComponent(value).
• PHP: rawurldecode($value).
• Python: urllib.parse.unquote(value).

Related tools

• URL Encoder – encode a value again
• URL Parser – split the address into parts
• Redirect Checker – follow a decoded destination

Step by step: reading a suspicious link safely

1. Copy the link without opening it.
2. Paste it here and decode it.
3. Look for an unexpected destination hidden in parameters such as url=, redirect= or next=.
4. If the real destination looks unfamiliar, do not open it — check it with our Suspicious Domain Checker first.

Why text gets encoded in the first place

Addresses may only contain a limited set of characters. Spaces, accented letters, emoji and symbols with special meanings — such as &, ? and # — are replaced by percent codes so the address arrives intact. Browsers usually show the readable form in the address bar, but logs, analytics exports and shared links often keep the encoded version.

Non-English characters

Letters outside the basic Latin alphabet are encoded as several bytes. For example, %C3%A9 becomes é and %D8%A7 is an Arabic letter. Decoding restores them so names and search terms in any language become readable again.