Start typing to search, or pick a tool.
Render Markdown to sanitised HTML with a live preview. Copy or download the result.
Markdown
HTML
This tool parses your Markdown using the marked library, which converts Markdown syntax into HTML elements. Headings become <h1>“<h6>, lists become <ul> or <ol>, code fences become <pre><code>, and inline formatting becomes <strong>, <em>, and <code>. After parsing, the output is sanitized with DOMPurify to remove dangerous tags and attributes before it's displayed.
The conversion is live: as you type Markdown in the left pane, the HTML updates in real time in the output pane. This lets you preview your rendered Markdown without switching between files or opening a separate preview tool.
The converter supports GitHub-Flavored Markdown (GFM), which includes standard Markdown plus extensions: fenced code blocks with syntax highlighting, tables, task lists, and strikethrough. It does not support footnotes, definition lists, or YAML front matter — those require additional plugins.
Inline HTML is allowed in Markdown, but DOMPurify strips anything unsafe. If you paste raw HTML into the Markdown input, <div>, <span>, and formatting tags pass through. Script tags, event handlers, and data URIs are removed. This prevents XSS when rendering untrusted Markdown.
Blog posts and documentation. Write content in Markdown for readability, then convert to HTML for publishing. Most static site generators (Astro, Hugo, Jekyll) do this automatically, but this tool is useful for previews, testing, and one-off conversions.
Email templates. Many email clients support HTML but not Markdown. Convert your Markdown draft to HTML, then paste it into your email tool. The sanitizer ensures the output is safe for email clients, which have limited HTML support.
Code comments and READMEs. When you write a README or code comment in Markdown and need to include it in an HTML page (like a GitHub Pages site), this tool gives you clean, sanitized output.
Markdown uses simple, readable syntax. Headings use # (one through six hashes). Bold text wraps in double asterisks: **bold**. Italic wraps in single asterisks: *italic*. Links use [text](url). Images use . Inline code wraps in backticks: `code`. Code fences use triple backticks with an optional language identifier for syntax highlighting: ```js. Blockquotes start with >. Unordered lists use - or *. Ordered lists use numbers: 1..
The beauty of Markdown is that it reads like plain text. You don't need to learn HTML to write formatted content. A README, a blog post, or a documentation page written in Markdown is perfectly readable without rendering. This readability is why Markdown has become the standard for developer documentation, GitHub READMEs, and note-taking apps.
GFM adds several useful extensions to standard Markdown. Tables use pipe characters: | Header | Header |. Task lists use checkboxes: - [x] Done, - [ ] Todo. Strikethrough uses double tildes: ~~deleted~~. Fenced code blocks support syntax highlighting when you specify a language after the opening backticks: ```python. These extensions make Markdown more practical for technical documentation without breaking backward compatibility with basic Markdown.
GFM also auto-links URLs — any bare URL like https://example.com becomes a clickable link without needing bracket syntax. Autolinks work for URLs and email addresses. This is particularly useful in technical documents where you frequently reference external resources.
Markdown allows raw HTML — you can embed <div>, <span>, and other tags directly. This is powerful but dangerous if the Markdown comes from untrusted sources. A malicious user could embed <script>stealcookies()</script> or <img onerror="malicious()">. This tool sanitizes all output with DOMPurify, which strips script tags, event handlers, and dangerous attributes while preserving safe HTML.
The sanitizer follows a whitelist approach: only known-safe tags and attributes pass through. <strong>, <em>, <a>, <code>, and structural elements are allowed. JavaScript URIs, data URIs with executable content, and inline event handlers are blocked. This ensures that even if you paste untrusted Markdown, the rendered output is safe to display in a browser. For server-side rendering, always sanitize on the server as well — client-side sanitization alone is insufficient for protecting other users.
// Try the editor
# Hello, DevSpeedTools
Markdown is a lightweight markup language. This page renders it as **sanitised** HTML.
- Easy to write
- Easy to read
- Sanitised by default
```js
function greet(name) {
return `Hello, ${name}!`;
}
```
> Blockquotes are supported.
Yes. Markdown is rendered with `marked`, then the output is sanitised with DOMPurify to remove dangerous tags and attributes.
Markdown allows raw HTML. We sanitise the final output, so script tags and event handlers are removed.
No. Conversion happens entirely in your browser.