What this tool does
Unicode Character Inspector breaks text into Unicode code points and explains how each character is represented in HTML, CSS, JavaScript, and UTF-16.
Inspect Unicode characters locally: code points, UTF-16 units, HTML entities, escapes, categories, invisible characters, and confusable security caveats.
Unicode Character Inspector breaks text into Unicode code points and explains how each character is represented in HTML, CSS, JavaScript, and UTF-16.
It helps debug invisible characters, copy/paste bugs, confusable domains, mixed scripts, emoji sequences, encoding issues, and suspicious identifiers.
The page iterates over JavaScript code points in your browser, derives escape formats, classifies common ranges, and adds warnings for controls and spoofing-prone characters.
Paste the smallest suspicious string: a username, domain, identifier, emoji sequence, copied whitespace, or one line from a failing parser.
Confusable detection is a practical warning layer, not a full Unicode security review. Production allow-lists and normalization policy belong in your application.
Inspection happens locally in the browser. Utilito does not intentionally receive the pasted text from this page.
Invisible and confusable characters can hide in production identifiers, domains, source code, logs, and customer data. Do not paste secrets or private records.
JavaScript stores some characters, especially emoji and historic scripts, as surrogate pairs using two UTF-16 code units.
They are characters that may affect text shaping, joining, or direction while being hard to see. They can be legitimate, but they also create debugging and spoofing risk.
No. This page inspects what you pasted. Apply normalization such as NFC or NFKC only when it matches your application policy.
Paste a route, filename, or identifier and check for zero-width joiners, non-breaking spaces, and bidi controls.
Spot mixed scripts and confusable characters before trusting copied text.
Inspect code points, UTF-16 units, JavaScript escapes, CSS escapes, and HTML entities for emoji-heavy strings.