Encoding escapes the five reserved HTML characters (& < > " ') so text renders literally instead of being parsed as markup. Decoding converts those entities back to plain characters. Everything runs in your browser.