QA Toolbox logoQA Toolbox

URL Decode

Decode percent-encoded URL text back to plain text.

Decodes %XX escapes and treats + as a space.

About URL Decode

URL Decode converts percent-encoded text back to its readable form — %20 becomes a space, %2F a slash, and UTF-8 sequences become their characters again. It is the fastest way to make sense of encoded query strings, callback URLs, OAuth redirects and tracking parameters copied from logs or a browser address bar.

Decoding runs instantly in your browser. Doubly-encoded values (a frequent bug in redirect chains) become visible too: decode once and you will see the still-encoded second layer.

How to use

  1. Paste the encoded text into the input box.
  2. The decoded result appears immediately; malformed sequences are reported as errors.
  3. If the result still contains %XX sequences, the value was double-encoded — paste the output back in to peel the next layer.

Frequently asked questions

What does an "URI malformed" error mean?

The input contains a % not followed by two valid hex digits — often a literal percent sign that was never encoded, or a truncated paste. Find the stray % and fix or remove it.

How do I spot double encoding?

Look for %25 — that is an encoded % sign, so %2520 is a space that was encoded twice. Decoding twice (and seeing where each layer came from) usually locates the component that over-encoded.

Why do + signs sometimes mean spaces?

In HTML form submissions (application/x-www-form-urlencoded), + encodes a space. In URLs proper it is a literal plus. If your source is a form body, mentally translate + to space after decoding.

Related tools