Regex Special Character Escaper
Escape special regex characters in a string so it can be used as a literal pattern. Free, instant.
How to use this tool
- Enter text to escape in the fields above.
- Results update instantly as you type — or click Calculate.
- Read your escaped regex and the full breakdown beneath it.
Escape a plain text string so all special regex metacharacters are treated as literals when passed to RegExp().
How it works
Regex Special Character Escaper takes a plain string and escapes all characters that have special meaning in regular expressions, so the string can be used as a literal pattern inside a regex. Special regex characters include . * + ? ( ) [ ] { } ^ $ | and backslash. Without escaping, these characters act as regex operators rather than matching themselves.
Enter the text you want to match literally and the tool prepends a backslash before every regex metacharacter. The resulting escaped string can be safely embedded in a regular expression pattern and will match only the exact input text.
This is essential when building dynamic regex patterns from user input, matching file paths or URLs that contain dots and slashes, or searching for strings that contain punctuation. It prevents accidental over-matching and potential ReDoS (Regular Expression Denial of Service) vulnerabilities.
Worked example
Match a literal file path in a regex search
- You want to find the exact string C:\Users\Alice\file.txt in a larger text.
- Paste C:\Users\Alice\file.txt into the Text to escape field.
- Click Escape.
- Copy the escaped output.
- Use that as the pattern in your regex engine.
The regex matches only the exact file path, not variations caused by the dot or backslash acting as metacharacters.
Common mistakes to avoid
- Using the unescaped string directly in a regex when building patterns dynamically from user input: a user searching for 'price (USD)' would break the regex unless parentheses are escaped.
- Double-escaping by calling the escaper on a string that is already escaped: this adds extra backslashes and causes the pattern to not match anything.
- Forgetting to escape the string when the regex engine is in a different language: escaping rules are nearly universal across PCRE-compatible engines, but always verify for exotic or legacy regex flavors.
Key terms
- Regex metacharacter
- A character that has a special meaning in a regular expression pattern rather than matching itself, such as . (match any character) or * (match zero or more).
- Literal match
- A regex pattern that matches exactly the specified characters without any special interpretation, as opposed to a pattern using metacharacters.
- ReDoS
- Regular Expression Denial of Service -- a vulnerability where certain regex patterns cause catastrophic backtracking on crafted input. Escaping user-supplied strings prevents this class of attack.
Frequently asked questions
- Which characters need escaping in regex?
- The characters . * + ? ^ $ { } ( ) | [ ] and \ have special meaning in regex and must be escaped with a backslash to match literally.