Jump to content

UTF-8: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
m Codepage layout: remove leading 0s, unnecessary
Description: Moved reference here
 
(300 intermediate revisions by 94 users not shown)
Line 1: Line 1:
{{Short description|ASCII-compatible variable-width encoding of Unicode, using one to four bytes}}
{{Short description|ASCII-compatible variable-width encoding of Unicode}}
{{Infobox character encoding
{{Infobox character encoding
| name = UTF-8
| name = UTF-8
Line 6: Line 6:
| image =
| image =
| caption =
| caption =
| standard = [http://www.unicode.org/versions/latest/ Unicode Standard]
| standard = [https://www.unicode.org/versions/latest/ Unicode Standard]
| status =
| status =
| classification = [[Unicode Transformation Format]], [[extended ASCII]], [[variable-width encoding|variable-length encoding]]
| classification = [[Unicode Transformation Format]], [[extended ASCII]], [[variable-width encoding|variable-length encoding]]
| encodes = [[ISO/IEC 10646]] ([[Unicode]])
| encodes = [[ISO/IEC 10646]] ([[Unicode]])
| extends = [[US-ASCII]]
| extends = [[ASCII]]
| prev = [[UTF-1]]
| prev = [[UTF-1]]
| next =
| next =
}}
}}


'''UTF-8''' is a [[variable-width encoding|variable-length]] [[character encoding]] standard used for electronic communication. Defined by the [[Unicode|Unicode Standard]], the name is derived from ''Unicode'' (or ''Universal Coded Character Set'') ''Transformation Format{{snd}} 8-bit''.<ref>{{Cite book |title=The Unicode Standard |edition=6.0 |chapter=Chapter 2. General Structure |publisher=[[The Unicode Consortium]] |location=Mountain View, California, US |isbn=978-1-936213-01-6 |chapter-url=https://www.unicode.org/versions/Unicode6.0.0/}}</ref>
'''UTF-8''' is a [[character encoding]] standard used for electronic communication. Defined by the [[Unicode]] Standard, the name is derived from ''Unicode Transformation Format{{snd}} 8-bit''.<ref>{{Cite book |title=The Unicode Standard |edition=6.0 |chapter=Chapter 2. General Structure |publisher=[[The Unicode Consortium]] |location=Mountain View, California, US |isbn=978-1-936213-01-6 |chapter-url=https://www.unicode.org/versions/Unicode6.0.0/}}</ref> Almost every webpage is stored in UTF-8.


UTF-8 is capable of encoding all 1,112,064{{efn|name=code-point-count|17 [[plane (Unicode)|planes]] times 2<sup>16</sup> code points per plane, minus 2<sup>11</sup> technically-invalid [[UTF-16#U+D800 to U+DFFF|surrogates]].}} valid character [[code point]]s in [[Unicode]] using one to four one-[[byte]] (8-bit) code units. Code points with lower numerical values, which tend to occur more frequently, are encoded using fewer bytes. It was designed for [[backward compatibility]] with [[ASCII]]: the first 128 characters of Unicode, which correspond one-to-one with ASCII, are encoded using a single byte with the same binary value as ASCII, so that valid ASCII text is valid UTF-8-encoded Unicode as well.
UTF-8 is capable of encoding all 1,112,064<ref>{{cite book |chapter-url=https://www.unicode.org/versions/Unicode16.0.0/core-spec/chapter-3/#G25539 |chapter=Conformance |at=D76 Unicode scalar value |title=The Unicode Standard |edition=6.0 |publisher=[[The Unicode Consortium]] |location=Mountain View, California, US |isbn=978-1-936213-01-6}} – 17 [[plane (Unicode)|planes]] times 2<sup>16</sup> code points per plane, minus 2<sup>11</sup> technically-invalid [[UTF-16#U+D800 to U+DFFF (surrogates)|surrogates]]</ref> valid Unicode scalar values using a [[variable-width encoding]] of one to four one-[[byte]] (8-bit) code units.


Code points with lower numerical values, which tend to occur more frequently, are encoded using fewer bytes. It was designed for [[backward compatibility]] with [[ASCII]]: the first 128 characters of Unicode, which correspond one-to-one with ASCII, are encoded using a single byte with the same binary value as ASCII, so that a UTF-8-encoded file using only those characters is identical to an ASCII file. Most software designed for any [[extended ASCII]] can read and write UTF-8 (including on [[Microsoft Windows]]) and this results in fewer internationalization issues than any alternative text encoding.<ref name="Microsoft GDK" /><ref name="whatwg" />
UTF-8 was designed as a superior alternative to [[UTF-1]], a proposed variable-length encoding with partial ASCII compatibility which lacked some features including [[self-synchronizing code|self-synchronization]] and fully ASCII-compatible handling of characters such as slashes. [[Ken Thompson]] and [[Rob Pike]] produced the first implementation for the [[Plan 9 from Bell Labs|Plan 9]] operating system in September 1992.<ref name="mgk25">{{ cite web | url = https://www.cl.cam.ac.uk/~mgk25/ucs/utf-8-history.txt | title = UTF-8 history | first = Rob | last = Pike | date = 30 April 2003 }}</ref><ref>{{cite book |chapter-url=https://www.cl.cam.ac.uk/~mgk25/ucs/UTF-8-Plan9-paper.pdf |chapter=Hello World or Καλημέρα κόσμε or こんにちは 世界 |title=Proceedings of the Winter 1993 USENIX Conference |first1=Rob |last1=Pike |first2=Ken |last2=Thompson |year=1993}}</ref> This led to its adoption by [[X/Open]] as its specification for ''FSS-UTF'',<ref>{{cite web|url=https://www.unicode.org/L2/Historical/wg20-n193-fss-utf.pdf|title=File System Safe UCS - Transformation Format (FSS-UTF) - X/Open Preliminary Specification|website=unicode.org}}</ref> which would first be officially presented at [[USENIX]] in January 1993<ref>{{cite web|url=https://www.usenix.org/legacy/publications/library/proceedings/sd93/| title=USENIX Winter 1993 Conference Proceedings|website=usenix.org}}</ref> and subsequently adopted by the [[Internet Engineering Task Force]] (IETF) in {{nowrap|RFC 2277}} ({{nowrap|BCP 18}})<ref>{{cite web|url=https://datatracker.ietf.org/doc/html/rfc2277|title=RFC 2277 - IETF Policy on Character Sets and Languages|website=datatracker.ietf.org|date=January 1998 }}</ref> for future internet standards work, replacing Single Byte Character Sets such as [[Latin-1]] in older RFCs.


UTF-8 is dominant for all countries/languages on the internet<!-- on the web, but more generally: e-mail, JSON, and likely e.g. XML too -->, with 99% <!-- rounded up --> global average use, is used in most standards, often the only allowed encoding, and is supported by all modern operating systems and programming languages.
UTF-8 results in fewer internationalization issues<ref name="Microsoft GDK" /><ref name="whatwg" /> than any alternative text encoding, and it has been implemented in all modern [[operating system]]s, including [[Microsoft Windows]], and standards such as [[JSON]], where, as is increasingly the case, it is the only allowed form of [[Unicode]].


== History ==
UTF-8 is the dominant encoding for the [[World Wide Web]] (and internet technologies), accounting for 97.9% of all web pages, over 99.0% of the top 10,000 pages, and up to 100.0% <!--100.0% for some, 99.9% for others.--> for many languages, {{as of|2023|lc=y}}.<ref name="W3TechsWebEncoding" /> Virtually all countries and languages have 95.0% or more use of UTF-8 encodings on the web.
{{See also|Universal Coded Character Set#History}}

== Naming ==

The official name for the encoding is '''UTF-8''', the spelling used in all Unicode Consortium documents. Most standards officially list it in upper case as well, but all that do are also case-insensitive and <code>utf-8</code> is often used in code.{{cn|date=March 2023}}

Some other spellings may also be accepted by standards, e.g. web standards (which include [[Cascading Style Sheets|CSS]], [[HTML]], [[XML]], and [[HTTP headers]]) explicitly allow '''utf8''' (and disallow "unicode"<!-- it's a synonym for "utf-16", "ucs-2", "unicodefeff" etc.-->) and many aliases for encodings<!-- e.g. "unicode20utf8" for UTF-8, likely not useful to list any or all, just stating "many"-->.<ref>{{cite web|url=https://encoding.spec.whatwg.org/#names-and-labels|title=Encoding Standard § 4.2. Names and labels|publisher=[[WHATWG]]|access-date=2018-04-29}}</ref> Spellings with a space e.g. "UTF 8" should not be used. The official [[Internet Assigned Numbers Authority]] also lists csUTF8 as the only alias,<ref name="IANA_2013_CS">{{cite web |publisher=[[Internet Assigned Numbers Authority]] |url=https://www.iana.org/assignments/character-sets |title=Character Sets |date=2013-01-23 |access-date=2013-02-08}}</ref> which is rarely used.


The [[International Organization for Standardization]] (ISO) set out to compose a universal multi-byte character set in 1989. The draft ISO 10646 standard contained a non-required [[Addendum|annex]] called [[UTF-1]] that provided a byte stream encoding of its [[32-bit computing|32-bit]] code points. This encoding was not satisfactory on performance grounds, among other problems, and the biggest problem was probably that it did not have a clear separation between ASCII and non-ASCII: new UTF-1 tools would be backward compatible with ASCII-encoded text, but UTF-1-encoded text could confuse existing code expecting ASCII (or [[extended ASCII]]), because it could contain continuation bytes in the range 0x21–0x7E that meant something else in ASCII, e.g., 0x2F for <code>/</code>, the [[Unix]] [[Path (computing)|path]] directory separator.
In [[Windows]], UTF-8 is '''[[Windows code page|codepage]]''' <code>65001</code><ref>{{Cite web |url=https://www.dostips.com/forum/viewtopic.php?t=5357 |title=UTF-8 codepage 65001 in Windows 7 - part I |author=Liviu |quote=Previously under XP (and, unverified, but probably Vista, too) for loops simply did not work while codepage 65001 was active |language=en-gb |date=2014-02-07 |access-date=2018-01-30}}</ref> (i.e. <code>CP_UTF8</code> in source code).


In July 1992, the [[X/Open]] committee XoJIG was looking for a better encoding. Dave Prosser of [[Unix System Laboratories]] submitted a proposal for one that had faster implementation characteristics and introduced the improvement that 7-bit ASCII characters would ''only'' represent themselves; multi-byte sequences would only include bytes with the high bit set. The name ''File System Safe UCS Transformation Format'' (''FSS-UTF'')<ref>{{cite web|url=https://www.unicode.org/L2/Historical/wg20-n193-fss-utf.pdf|title=File System Safe UCS&nbsp;— Transformation Format (FSS-UTF) - X/Open Preliminary Specification|website=unicode.org}}</ref> and most of the text of this proposal were later preserved in the final specification.<ref name="FSS-UTF">{{cite journal |title=Appendix F. FSS-UTF / File System Safe UCS Transformation format |journal=The Unicode Standard 1.1 |url=https://www.unicode.org/versions/Unicode1.1.0/appF.pdf |access-date=2016-06-07 |url-status=live |archive-url=https://web.archive.org/web/20160607215950/https://www.unicode.org/versions/Unicode1.1.0/appF.pdf |archive-date=2016-06-07}}</ref><ref name="Whistler_2001">{{cite web |title=FSS-UTF, UTF-2, UTF-8, and UTF-16 |author-first=Kenneth |author-last=Whistler |date=2001-06-12 |url=https://unicode.org/mail-arch/unicode-ml/y2001-m06/0318.html |access-date=2006-06-07 |url-status=live |archive-url=https://web.archive.org/web/20160607220249/https://unicode.org/mail-arch/unicode-ml/y2001-m06/0318.html |archive-date=2016-06-07 }}</ref><ref name="pikeviacambridge">{{cite web |url=https://www.cl.cam.ac.uk/~mgk25/ucs/utf-8-history.txt |title=UTF-8 history |author-first=Rob |author-last=Pike |author-link=Rob Pike |date=2003-04-30 |access-date=2012-09-07}}</ref> In August 1992, this proposal was circulated by an [[IBM]] X/Open representative to interested parties. A modification by [[Ken Thompson]] of the [[Plan 9 from Bell Labs|Plan 9 operating system]] group at [[Bell Labs]] made it [[Self-synchronizing code|self-synchronizing]], letting a reader start anywhere and immediately detect character boundaries, at the cost of being somewhat less bit-efficient than the previous proposal. It also abandoned the use of biases that prevented [[#overlong encodings|overlong encodings]].<ref name=pikeviacambridge/><ref>At that time subtraction was slower than bit logic on many computers, and speed was considered necessary for acceptance.{{citation needed|date=October 2024}}</ref> Thompson's design was outlined on September 2, 1992, on a [[placemat]] in a New Jersey diner with [[Rob Pike]]. In the following days, Pike and Thompson implemented it and updated [[Plan 9 from Bell Labs|Plan 9]] to use it throughout,<ref>{{cite book |chapter-url=https://www.cl.cam.ac.uk/~mgk25/ucs/UTF-8-Plan9-paper.pdf |chapter=Hello World or Καλημέρα κόσμε or こんにちは 世界 |title=Proceedings of the Winter 1993 USENIX Conference |first1=Rob |last1=Pike |first2=Ken |last2=Thompson |year=1993}}</ref> and then communicated their success back to X/Open, which accepted it as the specification for FSS-UTF.<ref name=pikeviacambridge/>
In [[MySQL]], UTF-8 is called <code>utf8mb4</code><ref>{{Cite web |title=MySQL :: MySQL 8.0 Reference Manual :: 10.9.1 The utf8mb4 Character Set (4-Byte UTF-8 Unicode Encoding) |url=https://dev.mysql.com/doc/refman/8.0/en/charset-unicode-utf8mb4.html |work=MySQL 8.0 Reference Manual |publisher=[[Oracle Corporation]] |access-date=2023-03-14}}</ref> (with <code>utf8mb3</code>, and its alias <code>utf8</code>, being a subset encoding for characters in the [[Basic Multilingual Plane]]<ref name="mysql3-utf8mb3">{{Cite web |title=MySQL :: MySQL 8.0 Reference Manual :: 10.9.2 The utf8mb3 Character Set (3-Byte UTF-8 Unicode Encoding) |url=https://dev.mysql.com/doc/refman/8.0/en/charset-unicode-utf8mb3.html |work=MySQL 8.0 Reference Manual |publisher=[[Oracle Corporation]] |access-date=2023-02-24}}</ref>). In HP [[Printer Command Language|PCL]], the Symbol-ID for UTF-8 is <code>18N</code>.<ref>{{Cite web|url=http://pclhelp.com/pcl-symbol-sets/|archive-url=https://web.archive.org/web/20150219212843/http://pclhelp.com/pcl-symbol-sets/|url-status=dead|archive-date=2015-02-19|title=HP PCL Symbol Sets {{!}} Printer Control Language (PCL & PXL) Support Blog|date=2015-02-19|access-date=2018-01-30}}</ref>


UTF-8 was first officially presented at the [[USENIX]] conference in [[San Diego]], from January 25 to 29, 1993.<ref>{{cite web|url=https://www.usenix.org/legacy/publications/library/proceedings/sd93/| title=USENIX Winter 1993 Conference Proceedings|website=usenix.org}}</ref> The [[Internet Engineering Task Force]] adopted UTF-8 in its Policy on Character Sets and Languages in RFC&nbsp;2277 ([[Request for Comments#Best Current Practice|<abbr title="Best Current Practice">BCP</abbr>]] 18) for future internet standards work in January 1998, replacing [[Single Byte Character Set]]s such as [[ISO/IEC 8859-1|Latin-1]] in older RFCs.<ref name="rfc2277">{{cite IETF |rfc=2277 |bcp=18 |title=IETF Policy on Character Sets and Languages |date=January 1998 |last1=Alvestrand |first1=Harald T. |author-link=Harald Alvestrand |publisher=[[Internet Engineering Task Force|IETF]]}}</ref>
In [[Oracle Database]] (since version 9.0), <code>AL32UTF8</code><ref>{{Cite web |title=Database Globalization Support Guide |url=https://docs.oracle.com/cd/E11882_01/server.112/e10729/ch6unicode.htm |access-date=2023-03-16 |website=docs.oracle.com |language=en}}</ref> means UTF-8. See also [[CESU-8]] for an almost synonym with UTF-8 that rarely should be used.


In November 2003, UTF-8 was restricted by {{IETF RFC|3629}} to match the constraints of the [[UTF-16]] character encoding: explicitly prohibiting code points corresponding to the high and low surrogate characters removed <!-- 2*2^10/(2^16-2^11) --> more than 3% of the three-byte sequences, and ending at U+10FFFF removed <!-- (2^21-(2^16+2^20))/(2^21-2^16) --> more than 48% of the four-byte sequences and all five- and six-byte sequences.<ref>{{cite web |url=https://plus.google.com/u/0/101960720994009339267/posts/Rz1udTvtiMg |title=UTF-8 turned 20 years old yesterday |author-first=Rob |author-last=Pike |author-link=Rob Pike |date=2012-09-06 |access-date=2012-09-07}}</ref>
'''UTF-8-BOM''' and '''UTF-8-NOBOM''' are sometimes used for text files which contain or don't contain a [[byte order mark]] (BOM), respectively.{{citation needed|date=March 2016}} In Japan especially, UTF-8 encoding without a BOM is sometimes called '''UTF-8N'''.<ref>{{cite web |url=https://suika.fam.cx/~wakaba/wiki/sw/n/BOM |title=BOM | work = suikawiki |archive-url=https://web.archive.org/web/20090117052232/https://suika.fam.cx/~wakaba/wiki/sw/n/BOM |archive-date=2009-01-17 |language=ja}}</ref><ref>{{cite web |author-last=Davis |author-first=Mark |author-link=Mark Davis (Unicode) |title=Forms of Unicode |publisher=[[IBM]] |url=https://www-128.ibm.com/developerworks/library/utfencodingforms/index.html |access-date=2013-09-18 |archive-url=https://web.archive.org/web/20050506211548/https://www-128.ibm.com/developerworks/library/utfencodingforms/index.html |archive-date=2005-05-06}}</ref>


== Encoding ==
== Description ==


UTF-8 encodes code points in one to four bytes, depending on the value of the code point. In the following table, the {{mono|x}} characters are replaced by the bits of the code point:
UTF-8 encodes code points in one to four bytes, depending on the value of the code point. In the following table, the characters {{mono|u}} to {{mono|z}} are replaced by the bits of the code point, from the positions {{mono|U+uvwxyz}}:


{| class="wikitable"
{| class="wikitable"
Line 52: Line 47:
! Byte 4
! Byte 4
|-
|-
| style="text-align: right;" |U+0000
| style="text-align: right" | U+0000
| style="text-align: right;" |U+007F
| style="text-align: right" | U+007F
|{{mono|0xxxxxxx}}
| {{mono|0yyyzzzz}}
| style="background: darkgray;" colspan=3 |
| style="background: darkgray" colspan=3 |
|-
|-
| style="text-align: right;" |U+0080
| style="text-align: right" | U+0080
| style="text-align: right;" |U+07FF
| style="text-align: right" | U+07FF
|{{mono|110xxxxx}}||{{mono|10xxxxxx}}
| {{mono|110xxxyy}}
| {{mono|10yyzzzz}}
| style="background: darkgray;" colspan=2 |
| style="background: darkgray" colspan=2 |
|-
|-
| style="text-align: right;" |U+0800
| style="text-align: right" | U+0800
| style="text-align: right;" |U+FFFF
| style="text-align: right" | U+FFFF
| {{mono|1110wwww}}
|{{mono|1110xxxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}
| {{mono|10xxxxyy}}
| style="background: darkgray;" |
| {{mono|10yyzzzz}}
| style="background: darkgray" |
|-
|-
| style="text-align: right;" |U+10000
| style="text-align: right" | U+010000
| style="text-align: right" | U+10FFFF
| style="text-align: right;" |{{efn|There are enough {{mono|x}} bits to encode up to 0x1FFFFF, but the current [[rfc:3629#section-3|RFC 3629 §3]] limits UTF-8 encoding to code point U+10FFFF, to match the limits of UTF-16. The obsolete [[rfc:2279|RFC 2279]] allowed UTF-8 encoding up to (then legal) code point U+7FFFFFF.}}U+10FFFF
| {{mono|11110uvv}}
|{{mono|11110xxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}
| {{mono|10vvwwww}}
| {{mono|10xxxxyy}}
| {{mono|10yyzzzz}}
|}
|}


The first 128 code points (ASCII) need one byte. The next 1,920 code points need two bytes to encode, which covers the remainder of almost all [[Latin-script alphabet]]s, and also [[International Phonetic Alphabet|IPA extensions]], [[Greek alphabet|Greek]], [[Cyrillic script|Cyrillic]], [[Coptic alphabet|Coptic]], [[Armenian alphabet|Armenian]], [[Hebrew alphabet|Hebrew]], [[Arabic alphabet|Arabic]], [[Syriac alphabet|Syriac]], [[Thaana]] and [[N'Ko script|N'Ko]] alphabets, as well as [[Combining Diacritical Marks]]. Three bytes are needed for the remaining 61,440 code points of the [[Basic Multilingual Plane]] (BMP), which are virtually all the rest in common use,<ref name="unicode-ch02-bmp">{{cite book |title=The Unicode Standard, Version 6.1 |year=2012 |editor-last1=Allen |editor-first1=Julie D. |editor2-last=Anderson |editor2-first=Deborah |editor3-last=Becker |editor3-first=Joe |editor4-last=Cook |editor4-first=Richard |publisher=Unicode Consortium |place=Mountain View, California }}</ref> including most [[CJK characters|Chinese, Japanese and Korean characters]]. Four bytes are needed for the 1,048,576 code points in the [[Plane (Unicode)|other planes of Unicode]], which include less common [[CJK characters]], various historic scripts, [[Glossary of mathematical symbols|mathematical symbols]], and [[emoji]] (pictographic symbols).
The first 128&nbsp;code points (ASCII) need 1&nbsp;byte. The next 1,920&nbsp;code points need two bytes to encode, which covers the remainder of almost all [[Latin-script alphabet]]s, and also [[International Phonetic Alphabet|IPA extensions]], [[Greek alphabet|Greek]], [[Cyrillic script|Cyrillic]], [[Coptic alphabet|Coptic]], [[Armenian alphabet|Armenian]], [[Hebrew alphabet|Hebrew]], [[Arabic alphabet|Arabic]], [[Syriac alphabet|Syriac]], [[Thaana]] and [[N'Ko script|N'Ko]] alphabets, as well as [[Combining Diacritical Marks]]. Three bytes are needed for the remaining 61,440&nbsp;codepoints of the [[Basic Multilingual Plane]] (BMP), including most [[CJK characters|Chinese, Japanese and Korean characters]]. Four bytes are needed for the 1,048,576&nbsp;non-BMP code points, which include [[emoji]], less common [[CJK characters]], and other useful characters.<ref name="problems_of_only_BMP">{{Cite web |last=Lunde |first=Ken |date=2022-01-09 |title=2022 Top Ten List: Why Support Beyond-BMP Code Points? |url=https://ken-lunde.medium.com/2022-top-ten-list-why-support-beyond-bmp-code-points-6a946d7735f9 |website=Medium |language=en|access-date=2024-01-07}}</ref>


This is a ''[[prefix code]]'' and it is unnecessary to read past the last byte of a code point to decode it. Unlike many earlier multi-byte text encodings such as [[Shift-JIS]], it is ''[[Self-synchronizing code|self-synchronizing]]'' so searches for short strings or characters are possible and that the start of a code point can be found from a random position by backing up at most 3 bytes. The values chosen for the lead bytes means sorting a list of UTF-8 strings puts them in the same order as sorting [[UTF-32]] strings.
A "character" can take more than 4 bytes because it is made of more than one code point. For instance a [[regional indicator symbol|national flag character]] takes 8 bytes since it is "constructed from a pair of Unicode scalar values" both from outside the BMP.<ref>{{Cite web|title=Apple Developer Documentation|url=https://developer.apple.com/documentation/swift/string|access-date=2021-03-15|website=developer.apple.com}}</ref>{{efn|Some complex emoji characters can take even more than this; the [[transgender flag]] emoji (🏳️‍⚧️), which consists of the five-codepoint sequence U+1F3F3 U+FE0F U+200D U+26A7 U+FE0F, requires sixteen bytes to encode, while that for the [[flag of Scotland]] (🏴󠁧󠁢󠁳󠁣󠁴󠁿) requires a total of twenty-eight bytes for the seven-codepoint sequence U+1F3F4 U+E0067 U+E0062 U+E0073 U+E0063 U+E0074 U+E007F.}}


=== Encoding process ===
=== Overlong encodings ===
{{anchor|overlong encodings}}
''In these examples, red, green, and blue digits indicate how bits from the code point are distributed among the UTF-8 bytes. Additional bits added by the UTF-8 encoding process are shown in black.''
# The Unicode code point for the [[euro sign]] € is U+20AC.
# As this code point lies between U+0800 and U+FFFF, this will take three bytes to encode.
# [[Hexadecimal]] {{mono|20AC}} is binary {{mono|{{fontcolor|blue|0010}} {{fontcolor|green|0000 10}}{{fontcolor|red|10 1100}}}}. The two leading zeros are added because a three-byte encoding needs exactly sixteen bits from the code point.
# Because the encoding will be three bytes long, its leading byte starts with three 1s, then a 0 ({{mono|1110...}})
# The four most significant bits of the code point are stored in the remaining low order four bits of this byte ({{mono|1110{{fontcolor|blue|0010}}}}), leaving 12 bits of the code point yet to be encoded ({{mono|...{{fontcolor|green|0000 10}}{{fontcolor|red|10 1100}}}}).
# All continuation bytes contain exactly six bits from the code point. So the next six bits of the code point are stored in the low order six bits of the next byte, and {{mono|10}} is stored in the high order two bits to mark it as a continuation byte (so {{mono|10{{fontcolor|green|000010}}}}).
# Finally the last six bits of the code point are stored in the low order six bits of the final byte, and again {{mono|10}} is stored in the high order two bits ({{mono|10{{fontcolor|red|101100}}}}).


Using a row in the above table to encode a code point less than "First code point" (thus using more bytes than necessary) is termed an ''overlong encoding''. These are a security problem because they allow the same code point to be encoded in multiple ways. Overlong encodings (of {{code|../}} for example) have been used to bypass security validations in high-profile products including Microsoft's [[Internet Information Services|IIS]] web server<ref name=MS00-078>{{ cite report | first = Marvin |last = Marin | date = 2000-10-17 | title = Windows NT UNICODE vulnerability analysis | department = Web server folder traversal | id = MS00-078 | series = Malware FAQ | website=SANS Institute | url=https://www.sans.org/resources/malwarefaq/wnt-unicode.php | url-status=dead | archive-url=https://web.archive.org/web/20140827001204/http://www.sans.org/security-resources/malwarefaq/wnt-unicode.php | archive-date=Aug 27, 2014 }}</ref> and Apache's Tomcat servlet container.<ref name=CVE-2008-2938>{{ cite web | title = CVE-2008-2938 | year = 2008 | website = National Vulnerability Database (nvd.nist.gov) | publisher = U.S. [[National Institute of Standards and Technology]] | url = https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-2938 }}</ref> Overlong encodings should therefore be considered an error and never decoded. [[#Modified UTF-8|Modified UTF-8]] allows an overlong encoding of {{tt|U+0000}}.
The three bytes {{mono|1110{{fontcolor|blue|0010}}}} {{mono|10{{fontcolor|green|000010}}}} {{mono|10{{fontcolor|red|101100}}}} can be more concisely written in [[hexadecimal]], as {{mono|{{fontcolor|blue|E2}} {{fontcolor|green|82}} {{fontcolor|red|AC}}}}.


=== Byte map ===
The following table summarizes this conversion, as well as others with different lengths in UTF-8.


The chart below gives the detailed meaning of each byte in a stream encoded in UTF-8.
{| class="wikitable"
|+ UTF-8 encoding process
{{UTF-8 byte map}}
|-
! colspan=2 | Character !! Binary code point !! Binary UTF-8 !! Hex UTF-8
|-
|[[Dollar sign|$]] || align=right|{{mono|U+0024}}
|align=right|{{mono|{{fontcolor|red|010 0100}}}}
|align=left|{{mono|0{{fontcolor|red|0100100}}}}
|align=left|{{mono|{{fontcolor|red|24}}}}
|-
|[[Pound sign|£]]|| align="right" |{{mono|U+00A3}}
|align=right|{{mono|{{fontcolor|green|000 10}}{{fontcolor|red|10 0011}}}}
|align=left|{{mono|110{{fontcolor|green|00010}} 10{{fontcolor|red|100011}}}}
|align=left|{{mono|{{fontcolor|green|C2}} {{fontcolor|red|A3}}}}
|-
|[[I (Cyrillic)|И]]|| align="right" |{{mono|U+0418}}
|align=right|{{mono|{{fontcolor|green|100 00}}{{fontcolor|red|01 1000}}}}
|align=left|{{mono|110{{fontcolor|green|10000}} 10{{fontcolor|red|011000}}}}
|align=left|{{mono|{{fontcolor|green|D0}} {{fontcolor|red|98}}}}
|-
|[[Devanagari (Unicode block)|ह]] || align=right|{{mono|U+0939}}
|align=right|{{mono|{{fontcolor|blue|0000}} {{fontcolor|green|1001 00}}{{fontcolor|red|11 1001}}}}
|align=left|{{mono|1110{{fontcolor|blue|0000}} 10{{fontcolor|green|100100}} 10{{fontcolor|red|111001}}}}
|align=left|{{mono|{{fontcolor|blue|E0}} {{fontcolor|green|A4}} {{fontcolor|red|B9}}}}
|-
|[[Euro sign|€]] || align=right|{{mono|U+20AC}}
|align=right|{{mono|{{fontcolor|blue|0010}} {{fontcolor|green|0000 10}}{{fontcolor|red|10 1100}}}}
|align=left|{{mono|1110{{fontcolor|blue|0010}} 10{{fontcolor|green|000010}} 10{{fontcolor|red|101100}}}}
|align=left|{{mono|{{fontcolor|blue|E2}} {{fontcolor|green|82}} {{fontcolor|red|AC}}}}
|-
|[[Hangul Syllables|한]] || align=right|{{mono|U+D55C}}
|align=right|{{mono|{{fontcolor|blue|1101}} {{fontcolor|green|0101 01}}{{fontcolor|red|01 1100}}}}
|align=left|{{mono|1110{{fontcolor|blue|1101}} 10{{fontcolor|green|010101}} 10{{fontcolor|red|011100}}}}
|align=left|{{mono|{{fontcolor|blue|ED}} {{fontcolor|green|95}} {{fontcolor|red|9C}}}}
|-
|[[Hwair|𐍈]] || align=right|{{mono|U+10348}}
|align=right|{{mono|{{fontcolor|#C000C0|0 00}}{{fontcolor|blue|01 0000}} {{fontcolor|green|0011 01}}{{fontcolor|red|00 1000}}}}
|align=left|{{mono|11110{{fontcolor|#C000C0|000}} 10{{fontcolor|blue|010000}} 10{{fontcolor|green|001101}} 10{{fontcolor|red|001000}}}}
|align=left|{{mono|{{fontcolor|#C000C0|F0}} {{fontcolor|blue|90}} {{fontcolor|green|8D}} {{fontcolor|red|88}}}}
|}


=== Example ===
=== Error handling ===
''In these examples, colored digits indicate multi-byte sequences used to encode characters beyond ASCII, while digits in black are ASCII.''


Not all sequences of bytes are valid UTF-8. A UTF-8 decoder should be prepared for:
As an example, the [[Vietnamese language|Vietnamese]] phrase {{lang|vi|Mình nói tiếng Việt}} ({{vi-nom|𨉟呐㗂越}}, "I speak Vietnamese") is encoded as follows:


* Bytes that never appear in UTF-8: {{tt|0xC0}}, {{tt|0xC1}}, {{tt|0xF5}}{{ndash}}{{tt|0xFF}}
{| class="wikitable" style="text-align: center;"
* A "continuation byte" ({{tt|0x80}}{{ndash}}{{tt|0xBF}}) at the start of a character
|-
* A non-continuation byte (or the string ending) before the end of a character
! Character
* An overlong encoding ({{tt|0xE0}} followed by less than {{tt|0xA0}}, or {{tt|0xF0}} followed by less than {{tt|0x90}})
| M || colspan="2" | ì || n || h || &#x20; || n || colspan="2" | ó || i || &#x20; || t || i || colspan="3" | ế || n || g || &#x20; || V || i || colspan="3" | ệ || t
* A 4-byte sequence that decodes to a value greater than {{tt|U+10FFFF}} ({{tt|0xF4}} followed by {{tt|0x90}} or greater)
|-
! Hex UTF-8
| 4D || {{fontcolor|green|C3}} || {{fontcolor|red|AC}} || 6E || 68 || 20 || 6E || {{fontcolor|green|C3}} || {{fontcolor|red|B3}} || 69 || 20 || 74 || 69 || {{fontcolor|blue|E1}} || {{fontcolor|green|BA}} || {{fontcolor|red|BF}} || 6E || 67 || 20 || 56 || 69 || {{fontcolor|blue|E1}} || {{fontcolor|green|BB}} || {{fontcolor|red|87}} || 74
|}


Many of the first UTF-8 decoders would decode these, ignoring incorrect bits. Carefully crafted invalid UTF-8 could make them either skip or create ASCII characters such as {{mono|NUL}}, slash, or quotes, leading to security vulnerabilities. It is also common to throw an exception or truncate the string at an error<ref>{{ cite web | title = DataInput | series = Java Platform SE 8 | website = docs.oracle.com | url = https://docs.oracle.com/javase/8/docs/enwiki/api/java/io/DataInput.html | access-date = 2021-03-24 }}</ref> but this turns what would otherwise be harmless errors (i.e. "file not found") into a [[denial of service]], for instance early versions of Python 3.0 would exit immediately if the command line or [[environment variable]]s contained invalid UTF-8.<ref name=PEP383>{{ cite web | title = Non-decodable bytes in system character interfaces | date = 2009-04-22 | website = python.org | url = https://www.python.org/dev/peps/pep-0383/ | access-date = 2014-08-13 }}</ref>
{| class="wikitable" style="text-align: center;"
|-
! Character
| colspan="4" | {{vi-nom|𨉟}} || colspan="3" | {{vi-nom|呐}} || colspan="3" | {{vi-nom|㗂}} || colspan="3" | {{vi-nom|越}}
|-
! Hex UTF-8
| {{fontcolor|#C000C0|F0}} || {{fontcolor|blue|A8}} || {{fontcolor|green|89}} || {{fontcolor|red|9F}} || {{fontcolor|blue|E5}} || {{fontcolor|green|91}} || {{fontcolor|red|90}} || {{fontcolor|blue|E3}} || {{fontcolor|green|97}} || {{fontcolor|red|82}} || {{fontcolor|blue|E8}} || {{fontcolor|green|B6}} || {{fontcolor|red|8A}}
|}


{{nobr|RFC 3629}} states "Implementations of the decoding algorithm MUST protect against decoding invalid sequences."<ref name="rfc3629">{{cite IETF |title=UTF-8, a transformation format of ISO 10646 |rfc=3629 |std=63 |last1=Yergeau |first1=F. |date=November 2003 |publisher=[[Internet Engineering Task Force|IETF]] |access-date=August 20, 2020}}</ref> ''The Unicode Standard'' requires decoders to: "...&nbsp;treat any ill-formed code unit sequence as an error condition. This guarantees that it will neither interpret nor emit an ill-formed code unit sequence."<!-- anyone have a copy of ISO/IEC 10646-1:2000 annex D for comparison? --> The standard now recommends replacing each error with the [[replacement character]] "�" (U+FFFD) and continue decoding.
=== Codepage layout ===


Some decoders consider the sequence {{mono|E1,A0,20}} (a truncated 3-byte code followed by a space) as a single error. This is not a good idea as a search for a space character would find the one hidden in the error. Since Unicode&nbsp;6 (October&nbsp;2010)<ref>{{ cite report | title = Unicode 6.0.0 | date = October 2010 | website = unicode.org | url = https://www.unicode.org/versions/Unicode6.0.0/ }}</ref> the standard (chapter&nbsp;3) has recommended a "best practice" where the error is either one continuation byte, or ends at the first byte that is disallowed, so {{mono|E1,A0,20}} is a two-byte error followed by a space. This means an error is no more than three bytes long and never contains the start of a valid character, and there are {{val|21952|fmt=commas}}&nbsp;different possible errors. Technically this makes UTF-8 no longer a [[prefix code]] (you have to read one byte past some errors to figure out they are an error), but searching still works if the searched-for string does not contain any errors.
The following table summarizes usage of UTF-8 ''code units'' (individual [[byte]]s or [[Octet (computing)|octets]]) in a ''code'' page format. The upper half is for bytes used only in single-byte codes, so it looks like a normal code page; the lower half is for continuation bytes and leading bytes and is explained further in the legend below.


Making each byte be an error, in which case {{mono|E1,A0,20}} is ''two'' errors followed by a space, also still allows searching for a valid string. This means there are only 128 different errors which makes it practical to store the errors in the output string,<ref name="pep383"/> or replace them with characters from a legacy encoding.
{|{{chset-table-header1|UTF-8}}
|-
|{{chset-left1|0x}}
|{{chset-ctrl1|U+0000 NULL|[[Null character|NUL]]}}
|{{chset-ctrl1|U+0001 START OF HEADING|[[Start of heading|SOH]]}}
|{{chset-ctrl1|U+0002 START OF TEXT|[[Start of text|STX]]}}
|{{chset-ctrl1|U+0003 END OF TEXT|[[End-of-Text character|ETX]]}}
|{{chset-ctrl1|U+0004 END OF TRANSMISSION|[[End-of-Transmission character|EOT]]}}
|{{chset-ctrl1|U+0005 ENQUIRY|[[Enquiry character|ENQ]]}}
|{{chset-ctrl1|U+0006 ACKNOWLEDGE|[[Acknowledge character|ACK]]}}
|{{chset-ctrl1|U+0007 BELL|[[Bell character|BEL]]}}
|{{chset-ctrl1|U+0008 BACKSPACE|[[Backspace|BS]]}}
|{{chset-ctrl1|U+0009 CHARACTER TABULATION|[[Tab key|HT]]}}
|{{chset-ctrl1|U+000A LINE FEED (LF)|[[Line feed|LF]]}}
|{{chset-ctrl1|U+000B LINE TABULATION|[[Vertical tab|VT]]}}
|{{chset-ctrl1|U+000C FORM FEED (FF)|[[Form feed|FF]]}}
|{{chset-ctrl1|U+000D CARRIAGE RETURN (CR)|[[Carriage return|CR]]}}
|{{chset-ctrl1|U+000E SHIFT OUT|[[Shift out|SO]]}}
|{{chset-ctrl1|U+000F SHIFT IN|[[Shift in|SI]]}}
|-
|{{chset-left1|1x}}
|{{chset-ctrl1|U+0010 DATA LINK ESCAPE|[[Data link escape|DLE]]}}
|{{chset-ctrl1|U+0011 DEVICE CONTROL ONE|[[Device Control 1|DC1]]}}
|{{chset-ctrl1|U+0012 DEVICE CONTROL TWO|[[Device Control 2|DC2]]}}
|{{chset-ctrl1|U+0013 DEVICE CONTROL THREE|[[Device Control 3|DC3]]}}
|{{chset-ctrl1|U+0014 DEVICE CONTROL FOUR|[[Device Control 4|DC4]]}}
|{{chset-ctrl1|U+0015 NEGATIVE ACKNOWLEDGE|[[Negative-acknowledge character|NAK]]}}
|{{chset-ctrl1|U+0016 SYNCHRONOUS IDLE|[[Synchronous idle|SYN]]}}
|{{chset-ctrl1|U+0017 END OF TRANSMISSION BLOCK|[[End of transmission block|ETB]]}}
|{{chset-ctrl1|U+0018 CANCEL|[[Cancel character|CAN]]}}
|{{chset-ctrl1|U+0019 END OF MEDIUM|[[End of medium|EM]]}}
|{{chset-ctrl1|U+001A SUBSTITUTE|[[Substitute character|SUB]]}}
|{{chset-ctrl1|U+001B ESCAPE|[[Escape character|ESC]]}}
|{{chset-ctrl1|U+001C INFORMATION SEPARATOR FOUR|[[File separator|FS]]}}
|{{chset-ctrl1|U+001D INFORMATION SEPARATOR THREE|[[Group separator|GS]]}}
|{{chset-ctrl1|U+001E INFORMATION SEPARATOR TWO|[[Record separator|RS]]}}
|{{chset-ctrl1|U+001F INFORMATION SEPARATOR ONE|[[Unit separator|US]]}}
|-


Only a small subset of possible byte strings are error-free UTF-8: several bytes cannot appear; a byte with the high bit set cannot be alone; and in a truly random string a byte with a high bit set has only a {{frac|1|15}} chance of starting a valid UTF-8 character. This has the (possibly unintended) consequence of making it easy to detect if a legacy text encoding is accidentally used instead of UTF-8, making conversion of a system to UTF-8 easier and avoiding the need to require a Byte Order Mark or any other metadata.
|{{chset-left1|2x}}
|{{chset-ctrl1|U+0020|&nbsp;[[space character|SP]]&nbsp;}}
|{{chset-cell1|U+0021 EXCLAMATION MARK|[[Exclamation mark|!]]}}
|{{chset-cell1|U+0022 QUOTATION MARK|[[Quotation mark|"]]}}
|{{chset-cell1|U+0023 NUMBER SIGN|[[Number sign|#]]}}
|{{chset-cell1|U+0024 DOLLAR SIGN|[[Dollar sign|$]]}}
|{{chset-cell1|U+0025 PERCENT SIGN|[[Percent sign|%]]}}
|{{chset-cell1|U+0026 AMPERSAND|[[Ampersand|&amp;]]}}
|{{chset-cell1|U+0027 APOSTROPHE|[[Apostrophe|']]}}
|{{chset-cell1|U+0028 LEFT PARENTHESIS|[[Parenthesis|(]]}}
|{{chset-cell1|U+0029 RIGHT PARENTHESIS|[[Parenthesis|)]]}}
|{{chset-cell1|U+002A ASTERISK|[[Asterisk|*]]}}
|{{chset-cell1|U+002B PLUS SIGN|[[Plus sign|+]]}}
|{{chset-cell1|U+002C COMMA|[[Comma (punctuation)|,]]}}
|{{chset-cell1|U+002D HYPHEN-MINUS|[[Minus sign|-]]}}
|{{chset-cell1|U+002E FULL STOP|[[Full stop|.]]}}
|{{chset-cell1|U+002F SOLIDUS|[[Slash (punctuation)|/]]}}
|-
|{{chset-left1|3x}}
|{{chset-cell1|U+0030 DIGIT ZERO|[[0]]}}
|{{chset-cell1|U+0031 DIGIT ONE|[[1]]}}
|{{chset-cell1|U+0032 DIGIT TWO|[[2]]}}
|{{chset-cell1|U+0033 DIGIT THREE|[[3]]}}
|{{chset-cell1|U+0034 DIGIT FOUR|[[4]]}}
|{{chset-cell1|U+0035 DIGIT FIVE|[[5]]}}
|{{chset-cell1|U+0036 DIGIT SIX|[[6]]}}
|{{chset-cell1|U+0037 DIGIT SEVEN|[[7]]}}
|{{chset-cell1|U+0038 DIGIT EIGHT|[[8]]}}
|{{chset-cell1|U+0039 DIGIT NINE|[[9]]}}
|{{chset-cell1|U+003A COLON|[[colon (punctuation)|&#x3A;]]}}
|{{chset-cell1|U+003B SEMICOLON|[[semicolon|&#x3B;]]}}
|{{chset-cell1|U+003C LESS-THAN SIGN|[[less-than sign|&lt;]]}}
|{{chset-cell1|U+003D EQUALS SIGN|[[equals sign|{{=}}]]}}
|{{chset-cell1|U+003E GREATER-THAN SIGN|[[greater-than sign|&gt;]]}}
|{{chset-cell1|U+003F QUESTION MARK|[[question mark|?]]}}
|-
|{{chset-left1|4x}}
|{{chset-cell1|U+0040 COMMERCIAL AT|[[@]]}}
|{{chset-cell1|U+0041 LATIN CAPITAL LETTER A|[[A]]}}
|{{chset-cell1|U+0042 LATIN CAPITAL LETTER B|[[B]]}}
|{{chset-cell1|U+0043 LATIN CAPITAL LETTER C|[[C]]}}
|{{chset-cell1|U+0044 LATIN CAPITAL LETTER D|[[D]]}}
|{{chset-cell1|U+0045 LATIN CAPITAL LETTER E|[[E]]}}
|{{chset-cell1|U+0046 LATIN CAPITAL LETTER F|[[F]]}}
|{{chset-cell1|U+0047 LATIN CAPITAL LETTER G|[[G]]}}
|{{chset-cell1|U+0048 LATIN CAPITAL LETTER H|[[H]]}}
|{{chset-cell1|U+0049 LATIN CAPITAL LETTER I|[[I]]}}
|{{chset-cell1|U+004A LATIN CAPITAL LETTER J|[[J]]}}
|{{chset-cell1|U+004B LATIN CAPITAL LETTER K|[[K]]}}
|{{chset-cell1|U+004C LATIN CAPITAL LETTER L|[[L]]}}
|{{chset-cell1|U+004D LATIN CAPITAL LETTER M|[[M]]}}
|{{chset-cell1|U+004E LATIN CAPITAL LETTER N|[[N]]}}
|{{chset-cell1|U+004F LATIN CAPITAL LETTER O|[[O]]}}
|-
|{{chset-left1|5x}}
|{{chset-cell1|U+0050 LATIN CAPITAL LETTER P|[[P]]}}
|{{chset-cell1|U+0051 LATIN CAPITAL LETTER Q|[[Q]]}}
|{{chset-cell1|U+0052 LATIN CAPITAL LETTER R|[[R]]}}
|{{chset-cell1|U+0053 LATIN CAPITAL LETTER S|[[S]]}}
|{{chset-cell1|U+0054 LATIN CAPITAL LETTER T|[[T]]}}
|{{chset-cell1|U+0055 LATIN CAPITAL LETTER U|[[U]]}}
|{{chset-cell1|U+0056 LATIN CAPITAL LETTER V|[[V]]}}
|{{chset-cell1|U+0057 LATIN CAPITAL LETTER W|[[W]]}}
|{{chset-cell1|U+0058 LATIN CAPITAL LETTER X|[[X]]}}
|{{chset-cell1|U+0059 LATIN CAPITAL LETTER Y|[[Y]]}}
|{{chset-cell1|U+005A LATIN CAPITAL LETTER Z|[[Z]]}}
|{{chset-cell1|U+005B LEFT SQUARE BRACKET|[[Square brackets|&#91;]]}}
|{{chset-cell1|U+005C REVERSE SOLIDUS|[[Backslash|\]]}}
|{{chset-cell1|U+005D RIGHT SQUARE BRACKET|[[Square brackets|&#93;]]}}
|{{chset-cell1|U+005E CIRCUMFLEX ACCENT|[[Caret|^]]}}
|{{chset-cell1|U+005F LOW LINE|[[Underscore|_]]}}
|-
|{{chset-left1|6x}}
|{{chset-cell1|U+0060 GRAVE ACCENT|[[`]]}}
|{{chset-cell1|U+0061 LATIN SMALL LETTER A|[[a]]}}
|{{chset-cell1|U+0062 LATIN SMALL LETTER B|[[b]]}}
|{{chset-cell1|U+0063 LATIN SMALL LETTER C|[[c]]}}
|{{chset-cell1|U+0064 LATIN SMALL LETTER D|[[d]]}}
|{{chset-cell1|U+0065 LATIN SMALL LETTER E|[[e]]}}
|{{chset-cell1|U+0066 LATIN SMALL LETTER F|[[f]]}}
|{{chset-cell1|U+0067 LATIN SMALL LETTER G|[[g]]}}
|{{chset-cell1|U+0068 LATIN SMALL LETTER H|[[h]]}}
|{{chset-cell1|U+0069 LATIN SMALL LETTER I|[[i]]}}
|{{chset-cell1|U+006A LATIN SMALL LETTER J|[[j]]}}
|{{chset-cell1|U+006B LATIN SMALL LETTER K|[[k]]}}
|{{chset-cell1|U+006C LATIN SMALL LETTER L|[[l]]}}
|{{chset-cell1|U+006D LATIN SMALL LETTER M|[[m]]}}
|{{chset-cell1|U+006E LATIN SMALL LETTER N|[[n]]}}
|{{chset-cell1|U+006F LATIN SMALL LETTER O|[[o]]}}
|-
|{{chset-left1|7x}}
|{{chset-cell1|U+0070 LATIN SMALL LETTER P|[[p]]}}
|{{chset-cell1|U+0071 LATIN SMALL LETTER Q|[[q]]}}
|{{chset-cell1|U+0072 LATIN SMALL LETTER R|[[r]]}}
|{{chset-cell1|U+0073 LATIN SMALL LETTER S|[[s]]}}
|{{chset-cell1|U+0074 LATIN SMALL LETTER T|[[t]]}}
|{{chset-cell1|U+0075 LATIN SMALL LETTER U|[[u]]}}
|{{chset-cell1|U+0076 LATIN SMALL LETTER V|[[v]]}}
|{{chset-cell1|U+0077 LATIN SMALL LETTER W|[[w]]}}
|{{chset-cell1|U+0078 LATIN SMALL LETTER X|[[x]]}}
|{{chset-cell1|U+0079 LATIN SMALL LETTER Y|[[y]]}}
|{{chset-cell1|U+007A LATIN SMALL LETTER Z|[[z]]}}
|{{chset-cell1|U+007B LEFT CURLY BRACKET|[[Curly brackets|{]]}}
|{{chset-cell1|U+007C VERTICAL LINE|[[Vertical bar|{{pipe}}]]}}
|{{chset-cell1|U+007D RIGHT CURLY BRACKET|[[Curly brackets|}]]}}
|{{chset-cell1|U+007E TILDE|[[Tilde|~]]}}
|{{chset-ctrl1|U+007F DELETE|[[Delete character|DEL]]}}
|-
|{{chset-left1|8x}}
|{{chset-cell1|+0|{{mono|+0}}|style=background:#FDD}}
|{{chset-cell1|+1|{{mono|+1}}|style=background:#FDD}}
|{{chset-cell1|+2|{{mono|+2}}|style=background:#FDD}}
|{{chset-cell1|+3|{{mono|+3}}|style=background:#FDD}}
|{{chset-cell1|+4|{{mono|+4}}|style=background:#FDD}}
|{{chset-cell1|+5|{{mono|+5}}|style=background:#FDD}}
|{{chset-cell1|+6|{{mono|+6}}|style=background:#FDD}}
|{{chset-cell1|+7|{{mono|+7}}|style=background:#FDD}}
|{{chset-cell1|+8|{{mono|+8}}|style=background:#FDD}}
|{{chset-cell1|+9|{{mono|+9}}|style=background:#FDD}}
|{{chset-cell1|+A|{{mono|+A}}|style=background:#FDD}}
|{{chset-cell1|+B|{{mono|+B}}|style=background:#FDD}}
|{{chset-cell1|+C|{{mono|+C}}|style=background:#FDD}}
|{{chset-cell1|+D|{{mono|+D}}|style=background:#FDD}}
|{{chset-cell1|+E|{{mono|+E}}|style=background:#FDD}}
|{{chset-cell1|+F|{{mono|+F}}|style=background:#FDD}}
|-
|{{chset-left1|9x}}
|{{chset-cell1|+10|{{mono|+10}}|style=background:#FDD}}
|{{chset-cell1|+11|{{mono|+11}}|style=background:#FDD}}
|{{chset-cell1|+12|{{mono|+12}}|style=background:#FDD}}
|{{chset-cell1|+13|{{mono|+13}}|style=background:#FDD}}
|{{chset-cell1|+14|{{mono|+14}}|style=background:#FDD}}
|{{chset-cell1|+15|{{mono|+15}}|style=background:#FDD}}
|{{chset-cell1|+16|{{mono|+16}}|style=background:#FDD}}
|{{chset-cell1|+17|{{mono|+17}}|style=background:#FDD}}
|{{chset-cell1|+18|{{mono|+18}}|style=background:#FDD}}
|{{chset-cell1|+19|{{mono|+19}}|style=background:#FDD}}
|{{chset-cell1|+1A|{{mono|+1A}}|style=background:#FDD}}
|{{chset-cell1|+1B|{{mono|+1B}}|style=background:#FDD}}
|{{chset-cell1|+1C|{{mono|+1C}}|style=background:#FDD}}
|{{chset-cell1|+1D|{{mono|+1D}}|style=background:#FDD}}
|{{chset-cell1|+1E|{{mono|+1E}}|style=background:#FDD}}
|{{chset-cell1|+1F|{{mono|+1F}}|style=background:#FDD}}
|-
|{{chset-left1|Ax}}
|{{chset-cell1|+20|{{mono|+20}}|style=background:#FDD}}
|{{chset-cell1|+21|{{mono|+21}}|style=background:#FDD}}
|{{chset-cell1|+22|{{mono|+22}}|style=background:#FDD}}
|{{chset-cell1|+23|{{mono|+23}}|style=background:#FDD}}
|{{chset-cell1|+24|{{mono|+24}}|style=background:#FDD}}
|{{chset-cell1|+25|{{mono|+25}}|style=background:#FDD}}
|{{chset-cell1|+26|{{mono|+26}}|style=background:#FDD}}
|{{chset-cell1|+27|{{mono|+27}}|style=background:#FDD}}
|{{chset-cell1|+28|{{mono|+28}}|style=background:#FDD}}
|{{chset-cell1|+29|{{mono|+29}}|style=background:#FDD}}
|{{chset-cell1|+2A|{{mono|+2A}}|style=background:#FDD}}
|{{chset-cell1|+2B|{{mono|+2B}}|style=background:#FDD}}
|{{chset-cell1|+2C|{{mono|+2C}}|style=background:#FDD}}
|{{chset-cell1|+2D|{{mono|+2D}}|style=background:#FDD}}
|{{chset-cell1|+2E|{{mono|+2E}}|style=background:#FDD}}
|{{chset-cell1|+2F|{{mono|+2F}}|style=background:#FDD}}
|-
|{{chset-left1|Bx}}
|{{chset-cell1|+30|{{mono|+30}}|style=background:#FDD}}
|{{chset-cell1|+31|{{mono|+31}}|style=background:#FDD}}
|{{chset-cell1|+32|{{mono|+32}}|style=background:#FDD}}
|{{chset-cell1|+33|{{mono|+33}}|style=background:#FDD}}
|{{chset-cell1|+34|{{mono|+34}}|style=background:#FDD}}
|{{chset-cell1|+35|{{mono|+35}}|style=background:#FDD}}
|{{chset-cell1|+36|{{mono|+36}}|style=background:#FDD}}
|{{chset-cell1|+37|{{mono|+37}}|style=background:#FDD}}
|{{chset-cell1|+38|{{mono|+38}}|style=background:#FDD}}
|{{chset-cell1|+39|{{mono|+39}}|style=background:#FDD}}
|{{chset-cell1|+3A|{{mono|+3A}}|style=background:#FDD}}
|{{chset-cell1|+3B|{{mono|+3B}}|style=background:#FDD}}
|{{chset-cell1|+3C|{{mono|+3C}}|style=background:#FDD}}
|{{chset-cell1|+3D|{{mono|+3D}}|style=background:#FDD}}
|{{chset-cell1|+3E|{{mono|+3E}}|style=background:#FDD}}
|{{chset-cell1|+3F|{{mono|+3F}}|style=background:#FDD}}
|-
|{{chset-left1|Cx}}
|{{chset-cell1|U+0000—U+003F|2|style=background:#DDD}}
|{{chset-cell1|U+0040—U+007F|2|style=background:#DDD}}
|{{chset-cell1|U+0080—U+00BF Latin-1 Supplement|[[Latin-1 Supplement (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+00C0—U+00FF Latin-1 Supplement|[[Latin-1 Supplement (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0100—U+013F Latin Extended-A|[[Latin Extended-A|2]]|style=background:#DFD}}
|{{chset-cell1|U+0140—U+017F Latin Extended-A|[[Latin Extended-A|2]]|style=background:#DFD}}
|{{chset-cell1|U+0180—U+01BF Latin Extended-B|[[Latin Extended-B|2]]|style=background:#DFD}}
|{{chset-cell1|U+01C0—U+01FF Latin Extended-B|[[Latin Extended-B|2]]|style=background:#DFD}}
|{{chset-cell1|U+0200—U+023F Latin Extended-B|[[Latin Extended-B|2]]|style=background:#DFD}}
|{{chset-cell1|U+0240—U+027F IPA Extensions|[[IPA Extensions|2]]|style=background:#DFD}}
|{{chset-cell1|U+0280—U+02BF IPA Extensions|[[IPA Extensions|2]]|style=background:#DFD}}
|{{chset-cell1|U+02C0—U+02FF Spacing Modifier Letters (U+02B0–02FF)|[[Phonetic symbols in Unicode#Spacing Modifier Letters (U+02B0–02FF)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0300—U+033F Combining characters|[[Combining character|2]]|style=background:#DFD}}
|{{chset-cell1|U+0340—U+037F Combining characters...|[[Combining character|2]]|style=background:#DFD}}
|{{chset-cell1|U+0380—U+03BF Greek and Coptic|[[Greek and Coptic|2]]|style=background:#DFD}}
|{{chset-cell1|U+03C0—U+03FF Greek and Coptic|[[Greek and Coptic|2]]|style=background:#DFD}}
|-
|{{chset-left1|Dx}}
|{{chset-cell1|U+0400—U+043F Cyrillic|[[Cyrillic (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0440—U+047F Cyrillic|[[Cyrillic (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0480—U+04BF Cyrillic|[[Cyrillic (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+04C0—U+04FF Cyrillic|[[Cyrillic (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0500—U+053F Cyrillic Supplement...|[[Cyrillic Supplement|2]]|style=background:#DFD}}
|{{chset-cell1|U+0540—U+057F Armenian|[[Armenian (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0580—U+05BF Hebrew|[[Unicode and HTML for the Hebrew alphabet|2]]|style=background:#DFD}}
|{{chset-cell1|U+05C0—U+05FF Hebrew|[[Unicode and HTML for the Hebrew alphabet|2]]|style=background:#DFD}}
|{{chset-cell1|U+0600—U+063F Arabic|[[Arabic (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0640—U+067F Arabic|[[Arabic (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0680—U+06BF Arabic|[[Arabic (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+06C0—U+06FF Arabic|[[Arabic (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0700—U+073F Syriac|[[Syriac (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+0740—U+077F Arabic Supplement|[[Arabic Supplement|2]]|style=background:#DFD}}
|{{chset-cell1|U+0780—U+07BF Thaana|[[Thaana (Unicode block)|2]]|style=background:#DFD}}
|{{chset-cell1|U+07C0—U+07FF NKo|[[NKo (Unicode block)|2]]|style=background:#DFD}}
|-
|{{chset-left1|Ex}}
|{{chset-cell1|U+0800—U+0FFF Indic|3|style=background:#ADA}}
|{{chset-cell1|U+1000—U+1FFF Misc.|3|style=background:#DFD}}
|{{chset-cell1|U+2000—U+2FFF Symbols|3|style=background:#DFD}}
|{{chset-cell1|U+3000—U+3FFF Kana...|3|style=background:#DFD}}
|{{chset-cell1|U+4000—U+4FFF CJK Unified Ideographs|[[CJK Unified Ideographs|3]]|style=background:#DFD}}
|{{chset-cell1|U+5000—U+5FFF CJK Unified Ideographs|[[CJK Unified Ideographs|3]]|style=background:#DFD}}
|{{chset-cell1|U+6000—U+6FFF CJK Unified Ideographs|[[CJK Unified Ideographs|3]]|style=background:#DFD}}
|{{chset-cell1|U+7000—U+7FFF CJK Unified Ideographs|[[CJK Unified Ideographs|3]]|style=background:#DFD}}
|{{chset-cell1|U+8000—U+8FFF CJK Unified Ideographs|[[CJK Unified Ideographs|3]]|style=background:#DFD}}
|{{chset-cell1|U+9000—U+9FFF CJK Unified Ideographs|[[CJK Unified Ideographs|3]]|style=background:#DFD}}
|{{chset-cell1|U+A000—U+AFFF Asian|3|style=background:#DFD}}
|{{chset-cell1|U+B000—U+BFFF Hangul|[[Hangul|3]]|style=background:#DFD}}
|{{chset-cell1|U+C000—U+CFFF Hangul|[[Hangul|3]]|style=background:#DFD}}
|{{chset-cell1|U+D000—U+DFFF Hangul...|[[Hangul|3]]|style=background:#ADA}}
|{{chset-cell1|U+E000—U+EFFF Private Use Area|[[Private Use Areas|3]]|style=background:#DFD}}
|{{chset-cell1|U+F000—U+FFFF Private Use Area...|[[Private Use Areas|3]]|style=background:#DFD}}
|-
|{{chset-left1|Fx}}
|{{chset-cell1|U+10000—U+3FFFF Supplementary Multilingual Plane...|[[Supplementary Multilingual Plane|4]]|style=background:#ADA}}
|{{chset-cell1|U+40000—U+7FFFF|4|style=background:#DFD}}
|{{chset-cell1|U+80000—U+BFFFF|4|style=background:#DFD}}
|{{chset-cell1|U+C0000—U+FFFFF Supplementary Special-purpose Plane...|[[Supplementary Special-purpose Plane|4]]|style=background:#DFD}}
|{{chset-cell1|U+100000—U+13FFFF Supplementary Private Use Area B|[[Private Use Areas|4]]|style=background:#ADA}}
|{{chset-cell1|U+140000—U+17FFFF|4|style=background:#DDD}}
|{{chset-cell1|U+180000—U+1BFFFF|4|style=background:#DDD}}
|{{chset-cell1|U+1C0000—U+1FFFFF|4|style=background:#DDD}}
|{{chset-cell1|U+200000—U+FFFFFF|5|style=background:#DDD}}
|{{chset-cell1|U+1000000—U+1FFFFFF|5|style=background:#DDD}}
|{{chset-cell1|U+2000000—U+2FFFFFF|5|style=background:#DDD}}
|{{chset-cell1|U+3000000—U+3FFFFFF|5|style=background:#DDD}}
|{{chset-cell1|U+4000000—U+3FFFFFFF|6|style=background:#DDD}}
|{{chset-cell1|U+40000000—U+7FFFFFFF|6|style=background:#DDD}}
|{{chset-cell1|||style=background:#DDD}}
|{{chset-cell1|||style=background:#DDD}}
|}


=== Surrogates ===
{{legend|white|7-bit (single-byte) code points. They must not be followed by a continuation byte.<ref>{{ citation | chapter-url = https://www.unicode.org/versions/Unicode13.0.0/ch03.pdf | title = The Unicode Standard | chapter = Chapter 3 | page = 54 }}</ref>}}
{{legend|#FDD|Continuation bytes.<ref>{{ citation | chapter-url = https://www.unicode.org/versions/Unicode13.0.0/ch03.pdf | title = The Unicode Standard | chapter = Chapter 3 | page = 55 }}</ref> The cell shows in hexadecimal the value of the 6 bits they add.{{efn|For example, cell {{mono|9D}} says +1D. The hexadecimal number 9D in binary is {{mono|10011101}}, and since the 2 highest bits ({{mono|10}}) are reserved for marking this as a continuation byte, the remaining 6 bits ({{mono|011101}}) have a hexadecimal value of 1D.}}}}
{{legend|#DFD|Leading bytes for a sequence of multiple bytes, must be followed by exactly ''N''&minus;1 continuation bytes.<ref>{{ citation | chapter-url = https://www.unicode.org/versions/Unicode13.0.0/ch03.pdf | title = The Unicode Standard | chapter = Chapter 3 | page = 55 }}</ref> The tooltip shows the code point range and the Unicode blocks encoded by sequences starting with this byte.}}
{{legend|#ADA|Leading bytes where not all arrangements of continuation bytes are valid. {{mono|E0}} and {{mono|F0}} could start overlong encodings. {{mono|F4}} can start code points greater than U+10FFFF. {{mono|ED}} can start code points in the range U+D800–U+DFFF, which are invalid [[UTF-16]] [[Universal Character Set characters#Surrogates|surrogate halves]].<ref>{{cite IETF |title=UTF-8, a transformation format of ISO 10646 |rfc=3629 |std=63 |last1=Yergeau |first1=F. |date=November 2003 |publisher=[[Internet Engineering Task Force|IETF]] |access-date=August 20, 2020}}</ref>}}
{{legend|#DDD|Do not appear in a valid UTF-8 sequence. {{mono|C0}} and {{mono|C1}} could be used only for an "overlong" encoding of a 1-byte character.<ref>{{ citation | chapter-url = https://www.unicode.org/versions/Unicode13.0.0/ch03.pdf | title = The Unicode Standard | chapter = Chapter 3 | page = 54 }}</ref> {{mono|F5}} to {{mono|FD}} are leading bytes of 4-byte or longer sequences that can only encode code points larger than U+10FFFF.<ref>{{cite IETF |title=UTF-8, a transformation format of ISO 10646 |rfc=3629 |std=63 |last1=Yergeau |first1=F. |date=November 2003 |publisher=[[Internet Engineering Task Force|IETF]] |access-date=August 20, 2020}}</ref> {{mono|FE}} and {{mono|FF}} were never assigned any meaning.<ref>{{ citation | chapter-url = https://www.unicode.org/versions/Unicode13.0.0/ch03.pdf | title = The Unicode Standard | chapter = Chapter 3 | page = 55 }}</ref>}}


Since RFC 3629 (November&nbsp;2003), the high and low surrogates used by [[UTF-16]] ({{tt|U+D800}} through {{tt|U+DFFF}}) are not legal Unicode values, and their UTF-8 encodings must be treated as an invalid byte sequence.<ref name="rfc3629"/> These encodings all start with {{tt|0xED}} followed by {{tt|0xA0}} or higher. This rule is often ignored as surrogates are allowed in Windows filenames and this means there must be a way to store them in a string.<ref name="PEP 529">{{ cite web | title = Change Windows filesystem encoding to UTF-8 | id = PEP&nbsp;529 | website = Python.org |language = en | url = https://www.python.org/dev/peps/pep-0529/ | access-date = 2022-05-10 }}</ref> UTF-8 that allows these surrogate halves has been (informally) called ''{{visible anchor|WTF-8}}'',<ref name="wtf-8">{{cite web | title = The WTF-8 encoding | url = https://simonsapin.github.io/wtf-8/}}</ref> while another variation that also encodes all non-BMP characters as two surrogates (6&nbsp;bytes instead of 4) is called ''[[CESU-8]]''.


=== Overlong encodings ===
=== Byte-order mark ===


If the Unicode [[byte-order mark]] {{tt|U+FEFF}} is at the start of a UTF-8 file, the first three bytes will be {{mono|0xEF}}, {{mono|0xBB}}, {{mono|0xBF}}.
In principle, it would be possible to inflate the number of bytes in an encoding by padding the code point with leading 0s. To encode the euro sign € from the above example in four bytes instead of three, it could be padded with leading 0s until it was 21&nbsp;bits long{{snd}}
{{mono|000 000010 000010 101100}}, and encoded as {{mono|11110{{fontcolor|#C000C0|000}}}} {{mono|10{{fontcolor|blue|000010}}}} {{mono|10{{fontcolor|green|000010}}}} {{mono|10{{fontcolor|red|101100}}}} (or {{mono|{{fontcolor|#C000C0|F0}}}} {{mono|{{fontcolor|blue|82}}}} {{mono|{{fontcolor|green|82}}}} {{mono|{{fontcolor|red|AC}}}} in hexadecimal). This is called an ''overlong encoding''.


The Unicode Standard neither requires nor recommends the use of the BOM for UTF-8, but warns that it may be encountered at the start of a file trans-coded from another encoding.<ref>{{citation | chapter-url = https://www.unicode.org/versions/Unicode15.0.0/ch02.pdf | title = The Unicode Standard&nbsp;— Version 15.0.0 | chapter = Chapter 2 | page = 39 }}</ref> While ASCII text encoded using UTF-8 is backward compatible with ASCII, this is not true when Unicode Standard recommendations are ignored and a BOM is added. A BOM can confuse software that isn't prepared for it but can otherwise accept UTF-8, e.g. programming languages that permit non-ASCII bytes in [[string literal]]s but not at the start of the file. Nevertheless, there was and still is software that always inserts a BOM when writing UTF-8, and refuses to correctly interpret UTF-8 unless the first character is a BOM (or the file only contains ASCII).<ref>{{Cite web |title=UTF-8 and Unicode FAQ for Unix/Linux |url=https://www.cl.cam.ac.uk/~mgk25/unicode.html}}</ref>
The standard specifies that the correct encoding of a code point uses only the minimum number of bytes required to hold the significant bits of the code point. Longer encodings are called ''overlong'' and are not valid UTF-8 representations of the code point. This rule maintains a one-to-one correspondence between code points and their valid encodings, so that there is a unique valid encoding for each code point. This ensures that string comparisons and searches are well-defined.


== Comparison to UTF-16 ==
=== Invalid sequences and error handling ===
{{See also|Comparison of Unicode encodings}}
{{unsourced section|find=UTF-8|find2=comparison to UTF-16|date=December 2024}}


For a long time there was considerable argument as to whether it was better to process text in [[UTF-16]] or in UTF-8.
Not all sequences of bytes are valid UTF-8. A UTF-8 decoder should be prepared for:


The primary advantage of UTF-16 is that the [[Unicode in Microsoft Windows|Windows API]] required it to be used to get access to all Unicode characters (only recently has this been fixed). This caused several libraries such as [[Qt (software)|Qt]] to also use UTF-16 strings which propagates this requirement to non-Windows platforms.
* invalid bytes
* an unexpected continuation byte
* a non-continuation byte before the end of the character
* the string ending before the end of the character (which can happen in simple string truncation)
* an overlong encoding
* a sequence that decodes to an invalid code point


In the early days of Unicode there were no characters greater than {{tt|U+FFFF}} and [[combining characters]] were rarely used, so the 16-bit encoding was fixed-size. This made processing of text more efficient, though the gains are nowhere as great as novice programmers may imagine. All such advantages were lost as soon as UTF-16 became variable width as well.
Many of the first UTF-8 decoders would decode these, ignoring incorrect bits and accepting overlong results. Carefully crafted invalid UTF-8 could make them either skip or create ASCII characters such as NUL, slash, or quotes. Invalid UTF-8 has been used to bypass security validations in high-profile products including Microsoft's [[Internet Information Services|IIS]] web server<ref name="MS00-078">{{cite web |url=https://www.sans.org/resources/malwarefaq/wnt-unicode.php |author-first=Marvin |author-last=Marin |title=Web Server Folder Traversal MS00-078 |date=2000-10-17}}</ref> and Apache's Tomcat servlet container.<ref name="CVE-2008-2938">{{cite web |url=https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-2938 |title= Summary for CVE-2008-2938 | work = National Vulnerability Database }}</ref> {{nowrap|RFC 3629}} states "Implementations of the decoding algorithm MUST protect against decoding invalid sequences."<ref name="rfc3629">{{Cite RFC |author-first=F. |author-last=Yergeau | rfc = 3629 | title= UTF-8, a transformation format of ISO 10646 |publisher=[[Internet Engineering Task Force]] |year=2003 |url=https://tools.ietf.org/html/rfc3629 |access-date=2015-02-03}}</ref> ''The Unicode Standard'' requires decoders to "...treat any ill-formed code unit sequence as an error condition. This guarantees that it will neither interpret nor emit an ill-formed code unit sequence."<!--anyone have a copy of ISO/IEC 10646-1:2000 annex D for comparison?-->


The code points {{tt|U+0800}}{{ndash}}{{tt|U+FFFF}} take 3 bytes in UTF-8 but only 2 in UTF-16. This led to the idea that text in Chinese and other languages would take more space in UTF-8. However, text is only larger if there are more of these code points than 1-byte ASCII code points, and this rarely happens in the real-world documents due to spaces, newlines, digits, punctuation, English words, and (depending on document format) markup.
Since RFC 3629 (November 2003), the high and low surrogate halves used by [[UTF-16]] (U+D800 through U+DFFF) and code points not encodable by UTF-16 (those after U+10FFFF) are not legal Unicode values, and their UTF-8 encoding must be treated as an invalid byte sequence. Not decoding unpaired surrogate halves makes it impossible to store invalid UTF-16 (such as Windows filenames or UTF-16 that has been split between the surrogates) as UTF-8,<ref name="PEP 529">{{Cite web|title=PEP 529 -- Change Windows filesystem encoding to UTF-8|url=https://www.python.org/dev/peps/pep-0529/|quote=This PEP proposes changing the default filesystem encoding on Windows to utf-8, and changing all filesystem functions to use the Unicode APIs for filesystem paths. [..] can correctly round-trip all characters used in paths (on POSIX with surrogateescape handling; on Windows because str maps to the native representation). On Windows bytes cannot round-trip all characters used in paths|access-date=2022-05-10|website=Python.org|language=en}}</ref> while it is possible with [[#WTF-8|WTF-8]].


UTF-8 has the advantages of being trivial to retrofit to any system that could handle an [[extended ASCII]], not having byte-order problems, and taking about 1/2 the space for any language using mostly Latin letters.
Some implementations of decoders throw exceptions on errors.<ref>{{Cite web|title=DataInput (Java Platform SE 8) |url=https://docs.oracle.com/javase/8/docs/enwiki/api/java/io/DataInput.html|access-date=2021-03-24|website=docs.oracle.com}}</ref> This has the disadvantage that it can turn what would otherwise be harmless errors (such as a "no such file" error) into a [[denial of service]]. For instance early versions of Python 3.0 would exit immediately if the command line or [[environment variable]]s contained invalid UTF-8.<ref name="PEP383">{{cite web |url=https://www.python.org/dev/peps/pep-0383/ |title=Non-decodable Bytes in System Character Interfaces |date=2009-04-22 |access-date=2014-08-13 |website=python.org}}</ref> An alternative practice is to replace errors with a replacement character. Since Unicode 6<ref>{{Cite web | url=https://www.unicode.org/versions/Unicode6.0.0/ | title=Unicode 6.0.0}}</ref> (October 2010), the standard ({{nowrap|chapter 3}}) has recommended a "best practice" where the error ends as soon as a disallowed byte is encountered. In these decoders {{mono|E1,A0,C0}} is two errors (2 bytes in the first one). This means an error is no more than three bytes long and never contains the start of a valid character, and there are 21,952 different possible errors.<ref>128 1-byte, (16+5)×64 2-byte, and 5×64×64 3-byte. There may be somewhat fewer if more precise tests are done for each continuation byte.</ref> The standard also recommends replacing each error with the [[replacement character]] "�" (U+FFFD).


=== Byte order mark ===
== Implementations and adoption ==
[[File:UTF-8 takes over.png|thumb|400px|Declared character set for the 10&nbsp;million most popular websites since 2010]]
[[File:Utf8webgrowth.svg|thumb|400px|Use of the main encodings on the web from 2001 to 2012 as recorded by Google,<ref name=MarkDavis2012>{{ cite web | author-last=Davis |author-first=Mark |author-link=Mark Davis (Unicode) | date=2012-02-03 | title=Unicode over 60&nbsp;percent of the web | website=Official Google blog | url=https://googleblog.blogspot.com/2012/02/unicode-over-60-percent-of-web.html | url-status=live |access-date=2020-07-24 | archive-url=https://web.archive.org/web/20180809152828/https://googleblog.blogspot.com/2012/02/unicode-over-60-percent-of-web.html | archive-date=2018-08-09 }}</ref> with UTF-8 overtaking all others in 2008 and over 60% of the web in 2012 (since then approaching 100%). UTF-8 is the only encoding of Unicode (explicitly) listed there, and the rest only provide subsets of Unicode. The ASCII-only figure includes all web pages that only contain ASCII characters, regardless of the declared header.]]


If the Unicode [[byte order mark]] (BOM, U+FEFF) character is at the start of a UTF-8 file, the first three bytes will be {{mono|0xEF}}, {{mono|0xBB}}, {{mono|0xBF}}.

The Unicode Standard neither requires nor recommends the use of the BOM for UTF-8, but warns that it may be encountered at the start of a file trans-coded from another encoding.<ref>{{citation | chapter-url = https://www.unicode.org/versions/Unicode15.0.0/ch02.pdf | title = The Unicode Standard - Version 15.0.0 | chapter = Chapter 2 | page = 39 }}</ref> While ASCII text encoded using UTF-8 is backward compatible with ASCII, this is not true when Unicode Standard recommendations are ignored and a BOM is added. A BOM can confuse software that isn't prepared for it but can otherwise accept UTF-8, e.g. programming languages that permit non-ASCII bytes in [[string literal]]s but not at the start of the file. Nevertheless, there was and still is software that always inserts a BOM when writing UTF-8, and refuses to correctly interpret UTF-8 unless the first character is a BOM (or the file only contains ASCII).<ref>{{Cite web |title=UTF-8 and Unicode FAQ for Unix/Linux |url=https://www.cl.cam.ac.uk/~mgk25/unicode.html}}</ref>

== Adoption ==
{{See also|Popularity of text encodings}}
{{See also|Popularity of text encodings}}


UTF-8 has been the most common encoding for the [[World Wide Web]] since 2008.<ref name=markdavis>{{cite web | first=Mark |last=Davis |author-link=Mark Davis (Unicode) | date=2008-05-05 | title=Moving to Unicode&nbsp;5.1 | website=Official Google blog |language=en | url=https://googleblog.blogspot.com/2008/05/moving-to-unicode-51.html | access-date=2023-03-13 }}</ref> {{As of|2025|01}}, UTF-8 is used by 98.5% of surveyed web sites.<ref name=W3TechsWebEncoding>{{Cite web|url=https://w3techs.com/technologies/cross/character_encoding/ranking|title=Usage Survey of Character Encodings broken down by Ranking |website=W3Techs |language = en | date = January 2025 |access-date=2025-01-07}}</ref> Although many pages only use ASCII characters to display content, very few websites now declare their encoding to only be ASCII instead of UTF-8.<ref>{{cite web |url=https://w3techs.com/technologies/details/en-usascii |title = Usage statistics and market share of ASCII for websites | date = January 2025 | website = W3Techs | access-date = 2025-01-07 }}</ref> Virtually all countries and <!-- over 97% all of the tracked --> languages have 95% or more use of UTF-8 encodings on the web. <!-- Over 61% of the languages tracked have <!- currently 61.4% have at least 99.5% UTF-8 support which rounds up to 100% (44.5% have "100.0%" which means 99.95+%) -> 100% UTF-8 use. -->
[[File:UTF-8_takes_over.png|thumb|400px|Declared character set for the 10&nbsp;million most popular websites since 2010]]
[[File:Utf8webgrowth.svg|thumb|400px|Use of the main encodings on the web from 2001–2012 as recorded by Google,<ref name=MarkDavis2012>{{cite web |author-last=Davis |author-first=Mark |author-link=Mark Davis (Unicode) |date=2012-02-03 |title=Unicode over 60&nbsp;percent of the web |website=Official Google blog |url=https://googleblog.blogspot.com/2012/02/unicode-over-60-percent-of-web.html |url-status=live |archive-url=https://web.archive.org/web/20180809152828/https://googleblog.blogspot.com/2012/02/unicode-over-60-percent-of-web.html |archive-date=2018-08-09 |access-date=2020-07-24}}</ref> with UTF-8 overtaking all others in 2008 and over 60% of the web in 2012 (since then approaching 100%). UTF-8 is the only encoding of Unicode (explicitly) listed there, and the rest only provide subsets of Unicode. The ASCII-only figure includes all web pages that only contain ASCII characters, regardless of the declared header.]]


Many standards only support UTF-8, e.g. [[JSON]] exchange requires it (without a byte-order mark (BOM)).<ref name=rfc8259>{{ cite IETF | last = Bray | first = Tim | editor-last = Bray | editor-first = Tim | date = December 2017 | title = The JavaScript Object Notation (JSON) Data Interchange Format | publisher = IETF | doi = 10.17487/RFC8259 | access-date = 16 February 2018 | rfc = 8259 }}</ref> UTF-8 is also the recommendation from the [[WHATWG]] for HTML and [[Document Object Model|DOM]] specifications, and stating "UTF-8 encoding is the most appropriate encoding for interchange of [[Unicode]]"<ref name=whatwg>{{ cite web | title = Encoding Standard | website = encoding.spec.whatwg.org | url = https://encoding.spec.whatwg.org/#preface | access-date = 2020-04-15 }}</ref> and the [[Internet Mail Consortium]] recommends that all e‑mail programs be able to display and create mail using UTF-8.<ref name=IMC>{{ cite web | url = https://www.imc.org/mail-i18n.html | title = Using International Characters in Internet Mail | publisher = Internet Mail Consortium | date = 1998-08-01 | access-date = 2007-11-08 | url-status = dead | archive-url = https://web.archive.org/web/20071026103104/https://www.imc.org/mail-i18n.html | archive-date = 2007-10-26}}</ref><ref name=mandatory>{{ cite web | title = Encoding Standard | website = encoding.spec.whatwg.org |language = en | url = https://encoding.spec.whatwg.org/#security-background | access-date = 2018-11-15 }}</ref> The [[World Wide Web Consortium]] recommends UTF-8 as the default encoding in XML and HTML (and not just using UTF-8, also declaring it in metadata), "even when all characters are in the ASCII range ... Using non-UTF-8 encodings can have unexpected results".<ref name=html5charset>{{ cite report | section = Specifying the document's character encoding | title = HTML&nbsp;5.2 | date = 14 December 2017 | publisher = [[World Wide Web Consortium]] | url = https://www.w3.org/TR/html5/document-metadata.html | section-url = https://www.w3.org/TR/html5/document-metadata.html#charset | access-date = 2018-06-03 | mode = cs1 }}</ref>
Most operating systems, including Windows, support UTF-8.


Lots of software has the ability to read/write UTF-8. It may though require the user to change options from the normal settings, or may require a BOM (byte-order mark) as the first character to read the file. Examples of software supporting UTF-8 include [[Microsoft Word]],<!-- "Unicode (UTF-8)", "Unicode (Big-Endian)" and "Unicode (UTF-7)" --><ref>{{ cite web | title=Choose text encoding when you open and save files | website=Microsoft Support (support.microsoft.com) | url=https://support.microsoft.com/en-us/office/choose-text-encoding-when-you-open-and-save-files-60d59c21-88b5-4006-831c-d536d42fd861 | access-date=2021-11-01 }}</ref><ref>{{ cite web | title=UTF-8 - Character encoding of Microsoft ''Word'' <code>DOC</code> and <code>DOCX</code> files? | website=Stack Overflow | url=https://stackoverflow.com/questions/28172022/character-encoding-of-microsoft-word-doc-and-docx-files | access-date=2021-11-01 }}</ref><!-- <ref>{{ cite web | last=Gao |first=Ivy | title=How to fix corrupted character encoding (corrupted text) in Microsoft ''Word'' | website=TurboFuture | url=https://turbofuture.com/computers/3-Easy-Ways-To-Fix-Corrupted-Character-Encoding-In-Plain-Text-Documents | access-date=2021-11-01 | lang=en }}</ref> --><ref>{{ cite web | title = Exporting a UTF-8 <code>.txt</code> file from ''Word'' | website = support.3playmedia.com | date = 14 March 2023 | url = https://support.3playmedia.com/hc/en-us/articles/227730088-Exporting-a-UTF-8-txt-file-from-Word }}</ref> [[Microsoft Excel]] (2016 and later),<ref>{{ cite web | title = Are <code>XLSX</code> files UTF-8 encoded, by definition? | series = Excel | website = Stack Overflow | url = https://stackoverflow.com/questions/45194771/are-xlsx-files-utf-8-encoded-by-definition | access-date = 2021-11-01 }}</ref><ref>{{ cite web | author1 = Abhinav, Ankit | author2 = Xu, Jazlyn | date = April 13, 2020 | title = How to open UTF-8 <code>CSV</code> file in ''Excel'' without mis-conversion of characters in Japanese and Chinese language for both Mac and Windows? | website = Microsoft Support Community | language = en-US | url = https://answers.microsoft.com/en-us/msoffice/forum/all/how-to-open-utf-8-csv-file-in-excel-without-mis/1eb15700-d235-441e-8b99-db10fafff3c2 | access-date = 2021-11-01 }}</ref> [[Google Drive]], [[LibreOffice]] and most databases.
Many standards only support UTF-8, e.g. [[JSON]] exchange requires it (without a byte order mark (BOM)).<ref name="rfc8259">{{cite report | last1=Bray | first1=Tim | date=December 2017 | title=The JavaScript Object Notation (JSON) Data Interchange Format | publisher=IETF | doi=10.17487/RFC8259 | url=https://tools.ietf.org/html/rfc8259 | access-date=16 February 2018 }}</ref> UTF-8 is also the recommendation from the [[WHATWG]] for HTML and [[Document Object Model|DOM]] specifications, and stating "UTF-8 encoding is the most appropriate encoding for interchange of [[Unicode]]"<ref name="whatwg">{{cite web |title = Encoding Standard |website = encoding.spec.whatwg.org |url = https://encoding.spec.whatwg.org/#preface |access-date = 2020-04-15 }}</ref> and the [[Internet Mail Consortium]] recommends that all e‑mail programs be able to display and create mail using UTF-8.<ref name="IMC">{{cite web |title = Usage of Internet mail in the world characters |date = 1998-08-01 |publisher = washingtonindependent.com |url = https://washingtonindependent.com/mail-i18n/ |access-date = 2007-11-08 }}</ref><ref name="mandatory">{{cite web | title = Encoding Standard |website = encoding.spec.whatwg.org |lang = en |url = https://encoding.spec.whatwg.org/#security-background |access-date = 2018-11-15 }}</ref> The [[World Wide Web Consortium]] recommends UTF-8 as the default encoding in XML and HTML (and not just using UTF-8, also declaring it in metadata), "even when all characters are in the ASCII range ... Using non-UTF-8 encodings can have unexpected results".<ref name="html5charset">{{cite report |section = Specifying the document's character encoding |title = HTML&nbsp;5.2 |date = 14 December 2017 |publisher = [[World Wide Web Consortium]] |url = https://www.w3.org/TR/html5/document-metadata.html |section-url = https://www.w3.org/TR/html5/document-metadata.html#charset |access-date = 2018-06-03 |mode = cs1 }}</ref>


Software that "defaults" to UTF-8 (meaning it writes it without the user changing settings, and it reads it without a BOM) has become more common since 2010.<ref>{{ cite web | last=Galloway |first=Matt | date=October 2012 | title=Character encoding for iOS developers; or, UTF-8 what now? | website=www.galloway.me.uk | language=en-UK | url=https://www.galloway.me.uk/2012/10/character-encoding-for-ios-developers-utf8/ | access-date=2021-01-02 | quote = ...&nbsp;in reality, you usually just assume UTF-8 since that is by far the most common encoding. }}</ref> [[Windows Notepad]], in all currently supported versions of Windows, defaults to writing UTF-8 without a BOM (a change from {{nobr|[[Windows 7]]}} ''Notepad''), bringing it into line with most other text editors.<ref>{{ cite web | title=Windows&nbsp;10 Notepad is getting better UTF-8 encoding support | website=BleepingComputer | url=https://www.bleepingcomputer.com/news/microsoft/windows-10-notepad-is-getting-better-utf-8-encoding-support/ | access-date=2021-03-24 | quote=Microsoft is now defaulting to saving new text files as UTF-8 without BOM, as shown below. | language=en-us }}</ref> Some system files on [[Windows 11|Windows&nbsp;11]] require UTF-8<ref>{{ cite web | title = Customize the Windows&nbsp;11 ''Start'' menu | url=https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/customize-the-windows-11-start-menu | access-date=2021-06-29 | website=docs.microsoft.com | language=en-us | quote=Make sure your LayoutModification.json uses UTF-8 encoding. }}</ref> with no requirement for a BOM, and almost all files on macOS and Linux are required to be UTF-8 without a BOM.{{citation needed|date=June 2021}} Programming languages that default to UTF-8 for [[input/output|I/O]] include [[Ruby (programming language)|Ruby]]&nbsp;3.0,<ref>{{ cite web | title = Set default for Encoding.default_external to UTF-8 on Windows | series = Ruby master | id = Feature&nbsp;#16604 | website = Ruby Issue Tracking System (bugs.ruby-lang.org) | url = https://bugs.ruby-lang.org/issues/16604 | access-date = 2022-08-01 }}</ref><ref>{{ cite web | title = Feature #12650: Use UTF-8 encoding for ENV on Windows | series = Ruby master | website = Ruby Issue Tracking System (bugs.ruby-lang.org) | url = https://bugs.ruby-lang.org/issues/12650 | access-date = 2022-08-01 }}</ref> [[R (programming language)|R]]&nbsp;4.2.2,<ref>{{ cite web | title = New features in R&nbsp;4.2.0 | date = 2022-04-01 | website = R&nbsp;bloggers (r-bloggers.com) | series = The Jumping Rivers Blog | url = https://www.r-bloggers.com/2022/04/new-features-in-r-4-2-0/ | access-date = 2022-08-01 | language = en-US }}</ref> [[Raku (programming language)|Raku]] and [[Java (programming language)|Java]]&nbsp;18.<ref name=Java_UTF-8_and_UTF-16>{{ cite web | title = UTF-8 by default | id = JEP 400 | website = openjdk.java.net | url = https://openjdk.java.net/jeps/400 | access-date=2022-03-30 }}</ref> Although the current version of [[Python (programming language)|Python]] requires an option to <code>open()</code> to read/write UTF-8,<ref>{{ cite web | title = add a new UTF-8 mode | website = peps.python.org | id = PEP&nbsp;540 | url = https://peps.python.org/pep-0540/ | access-date = 2022-09-23 }}</ref> plans exist to make UTF-8 I/O the default in Python&nbsp;3.15.<ref>{{ cite web | title = Make UTF-8 mode default | website = peps.python.org | id = PEP&nbsp;686 | url = https://peps.python.org/pep-0686/ | access-date=2023-07-26 }}</ref> [[C++23]] adopts UTF-8 as the only portable source code file format.<ref>{{ cite report | title = Support for UTF-8 as a portable source file encoding | year = 2022 | id = p2295r6 | website = open-std.org | url = https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2022/p2295r6.pdf }}</ref>
UTF-8 has been the most common encoding for the [[World Wide Web]] since 2008.<ref name="markdavis">{{Cite web |author-first=Mark |author-last=Davis |author-link=Mark Davis (Unicode) |date=2008-05-05|title=Moving to Unicode&nbsp;5.1 |url=https://googleblog.blogspot.com/2008/05/moving-to-unicode-51.html |access-date=2023-03-13 |website=Official Google Blog |language=en}}</ref> {{As of|2023|04}}, UTF-8 is used by 97.9% of surveyed web sites.<ref name="W3TechsWebEncoding">{{Cite web|url=https://w3techs.com/technologies/cross/character_encoding/ranking|title=Usage Survey of Character Encodings broken down by Ranking|website=w3techs.com|language=en|access-date=2023-04-02}}</ref>{{efn|W3Techs.com survey<ref name="W3TechsWebEncoding" /> is based on the encoding as declared in the server's response, see https://w3techs.com/forum/topic/22994}} Although many pages only use ASCII characters to display content, few websites now declare their encoding to only be ASCII instead of UTF-8.<ref>{{cite web |title=Usage statistics and market share of ASCII for websites, October&nbsp;2021 |website=w3techs.com |url=https://w3techs.com/technologies/details/en-usascii |access-date=2020-11-01}}</ref> Over 45% of the languages tracked have 100% UTF-8 use.


Backwards compatibility is a serious impediment to changing code and APIs using [[UTF-16]] to use UTF-8, but this is happening. {{As of|2019|05}}, Microsoft [[Unicode in Microsoft Windows#UTF-8|added the capability]] for an application to set UTF-8 as the "code page" for the Windows API, removing the need to use UTF-16; and more recently has recommended programmers use UTF-8,<ref name=Microsoft-UTF-8>{{ cite web | title=Use UTF-8 code pages in Windows apps | website=[[Microsoft Learn]] | date=20 August 2024 |language=en-us | url=https://learn.microsoft.com/en-us/windows/apps/design/globalizing/use-utf8-code-page | access-date=2024-09-24}}</ref> and even states "UTF-16 [...] is a unique burden that Windows places on code that targets multiple platforms".<ref name="Microsoft GDK">{{ cite web | title=UTF-8 support in the Microsoft GDK | series = Microsoft Game Development Kit (GDK) | website = [[Microsoft Learn]] |language=en-us | url=https://learn.microsoft.com/en-us/gaming/gdk/_content/gc/system/overviews/utf-8 | access-date = 2023-03-05 }}</ref>
Lots of software has the ability to read/write UTF-8, and sometimes (even in some Microsoft products) UTF-8 is the only option. It may though require the user to change options from the normal settings, or may require a BOM (byte order mark) as the first character to read the file. Examples of software supporting UTF-8 include [[Microsoft Word]],<!-- "Unicode (UTF-8)", "Unicode (Big-Endian)" and "Unicode (UTF-7)" --><ref>{{Cite web|title=Choose text encoding when you open and save files|url=https://support.microsoft.com/en-us/office/choose-text-encoding-when-you-open-and-save-files-60d59c21-88b5-4006-831c-d536d42fd861|access-date=2021-11-01|website=support.microsoft.com}}</ref><ref>{{Cite web|title=utf 8 - Character encoding of Microsoft Word DOC and DOCX files?|url=https://stackoverflow.com/questions/28172022/character-encoding-of-microsoft-word-doc-and-docx-files|access-date=2021-11-01|website=Stack Overflow}}</ref><!--<ref>{{Cite web|last=Gao|first=Ivy|title=How to Fix Corrupted Character Encoding (Corrupted Text) in Microsoft Word|url=https://turbofuture.com/computers/3-Easy-Ways-To-Fix-Corrupted-Character-Encoding-In-Plain-Text-Documents|access-date=2021-11-01|website=TurboFuture|language=en}}</ref>--><ref>{{Cite web|title=Exporting a UTF-8 .txt file from Word|url=https://support.3playmedia.com/hc/en-us/articles/227730088-Exporting-a-UTF-8-txt-file-from-Word}}</ref> [[Microsoft Excel]] (2016 and later),<ref>{{Cite web|title=excel - Are XLSX files UTF-8 encoded by definition?|url=https://stackoverflow.com/questions/45194771/are-xlsx-files-utf-8-encoded-by-definition|access-date=2021-11-01|website=Stack Overflow}}</ref><ref>{{Cite web|title=How to open UTF-8 CSV file in Excel without mis-conversion of characters in Japanese and Chinese language for both Mac and Windows?|url=https://answers.microsoft.com/en-us/msoffice/forum/all/how-to-open-utf-8-csv-file-in-excel-without-mis/1eb15700-d235-441e-8b99-db10fafff3c2|access-date=2021-11-01|website=answers.microsoft.com|language=en-US}}</ref> [[Google Drive]] and [[LibreOffice]]. Most databases can read and write UTF-8.
The default string primitive in [[Go (programming language)|Go]],<ref>{{ cite report | section=Source code representation | title=The ''Go'' Programming Language Specification | website=golang.org | section-url=https://golang.org/ref/spec#Source_code_representation | access-date=2021-02-10 }}</ref>
[[Julia (programming language)|Julia]], [[Rust (programming language)|Rust]], [[Swift (programming language)#String support|Swift]] (since version 5),<ref>{{ cite web | last=Tsai |first=Michael J. | date=21 March 2019 | title=UTF-8 string in Swift&nbsp;5 | type=blog post |language=en | url=https://mjtsai.com/blog/2019/03/21/utf-8-string-in-swift-5/ | access-date=2021-03-15 }}</ref> and [[PyPy]]<ref>{{ cite web | title=PyPy v7.1 released; now uses UTF-8 internally for Unicode strings | department=Mattip | date=2019-03-24 | website=PyPy status blog | url=https://morepypy.blogspot.com/2019/03/pypy-v71-released-now-uses-utf-8.html | access-date=2020-11-21 }}</ref> uses UTF-8 internally in all cases. Python (since version 3.3) uses UTF-8 internally for Python C API extensions<ref name=PEP393>{{ cite web | title = Flexible String Representation | id = PEP&nbsp;393 | website = Python.org |language=en | url = https://peps.python.org/pep-0393 | access-date = 2022-05-18 }}</ref><ref>{{Cite web |title=Common Object Structures |url=https://docs.python.org/3/c-api/structures.html |access-date=2024-05-29 |website=Python documentation |language=en}}</ref> and sometimes for strings<ref name=PEP393/><ref>{{ cite web | title=Unicode objects and codecs | url=https://docs.python.org/3/c-api/unicode.html | access-date=2023-08-19 |website=Python documentation | quote=UTF-8 representation is created on demand and cached in the Unicode object.}}</ref> and a future version of Python is planned to store strings as UTF-8 by default.<ref>{{ cite web | title=PEP&nbsp;623&nbsp;– remove wstr from Unicode | website=Python.org |language=en | url=https://www.python.org/dev/peps/pep-0623/ | access-date=2020-11-21 }}</ref><ref>{{ cite web | last=Wouters |first=Thomas | date=2023-07-11 | title=Python 3.12.0 beta 4 released | website = Python Insider (pythoninsider.blogspot.com) | type = blog post | url=https://pythoninsider.blogspot.com/2023/07/pleased-to-announce-release-of-python-3.html | access-date=2023-07-26 | quote=The deprecated <code>wstr</code> and <code>wstr_length</code> members of the C implementation of unicode objects were removed, per PEP 623. }}</ref> Modern versions of [[Microsoft Visual Studio]] use UTF-8 internally.<ref>{{ cite web | title=validate-charset (validate for compatible characters) | website=docs.microsoft.com |language=en-us | url=https://docs.microsoft.com/en-us/cpp/build/reference/validate-charset-validate-for-compatible-characters | access-date=2021-07-19 | quote=Visual Studio uses UTF-8 as the internal character encoding during conversion between the source character set and the execution character set. }}</ref> Microsoft's SQL Server 2019 added support for UTF-8, and using it results in a 35% speed increase, and "nearly 50% reduction in storage requirements."<ref>{{ cite web | title = Introducing UTF-8 support for SQL Server | date = 2019-07-02 | website = techcommunity.microsoft.com | url = https://techcommunity.microsoft.com/t5/sql-server/introducing-utf-8-support-for-sql-server/ba-p/734928 | access-date = 2021-08-24 | language = en-US }}</ref>


{{anchor|Modified UTF-8}}
However for local text files UTF-8 usage is less prevalent, where a few legacy single-byte (and a few [[variable-width_encoding#CJK_multibyte_encodings|CJK multi-byte]]) encodings remain in use to some degree. The primary cause for this is text editors that refuse to use UTF-8 when processing files, unless the first bytes of the file encode a byte order mark character (BOM).<ref>{{cite web |title=How can I make Notepad to save text in UTF-8 without the BOM? |website=Stack Overflow |url=https://stackoverflow.com/questions/8432584/how-can-i-make-notepad-to-save-text-in-utf-8-without-the-bom |access-date=2021-03-24}}</ref> Many other text editors simply assume a UTF-8 encoding for all files due to its [[Popularity of text encodings|nigh-ubiquity]].<ref>{{cite web |last=Galloway |first=Matt |date=October 2012 |title=Character encoding for iOS developers. Or, UTF-8 what now? |website=www.galloway.me.uk |lang=en |url=http://www.galloway.me.uk/2012/10/character-encoding-for-ios-developers-utf8/ |access-date=2021-01-02 |quote=in reality, you usually just assume UTF-8 since that is by far the most common encoding.}}</ref> Since Windows&nbsp;10 [[Windows Notepad]] defaults to writing UTF-8 without a BOM (a change since {{nobr|[[Windows 7]]}}), bringing it into line with most other text editors.<ref>{{cite web |title=Windows&nbsp;10 Notepad is getting better UTF-8 encoding support |lang=en-us |website=BleepingComputer |url=https://www.bleepingcomputer.com/news/microsoft/windows-10-notepad-is-getting-better-utf-8-encoding-support/ |access-date=2021-03-24 |quote=Microsoft is now defaulting to saving new text files as UTF-8 without BOM, as shown below.}}</ref> Some system files on Windows 11 require UTF-8<ref>{{cite web |title=Customize the Windows&nbsp;11 Start menu |url=https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/customize-the-windows-11-start-menu |access-date=2021-06-29 |website=docs.microsoft.com |lang=en-us |quote=Make sure your LayoutModification.json uses UTF-8 encoding.}}</ref> with no requirement for a BOM, and almost all files on macOS and Linux are required to be UTF-8 without a BOM.{{cn|date=June 2021}} [[Java (programming language)|Java]] 18 defaults to reading and writing files as UTF-8,<ref name=Java_UTF-8_and_UTF-16>{{cite web |title=JEP 400: UTF-8 by default |website=openjdk.java.net |url=https://openjdk.java.net/jeps/400 |access-date=2022-03-30}}</ref> and in older versions (e.g. [[long-term support|LTS]] versions) only the [[non-blocking I/O (Java)|NIO]]&nbsp;API was changed to do so. Many other programming languages default to UTF-8 for [[input/output|I/O]], including [[Ruby (programming language)|Ruby]]&nbsp;3.0<ref>{{cite web |title=Feature&nbsp;#16604: Set default for Encoding.default_external to UTF-8 on Windows |series=Ruby master – Ruby Issue Tracking System |website=bugs.ruby-lang.org |url=https://bugs.ruby-lang.org/issues/16604 |access-date=2022-08-01}}</ref><ref>{{cite web |title=Feature #12650: Use UTF-8 encoding for ENV on Windows |series=Ruby master – Ruby Issue Tracking System |website=bugs.ruby-lang.org |url=https://bugs.ruby-lang.org/issues/12650 |access-date=2022-08-01}}</ref> and [[R (programming language)|R]]&nbsp;4.2.2.<ref>{{cite web |title=New features in R&nbsp;4.2.0 |date=2022-04-01 |series=R&nbsp;bloggers |website=The Jumping Rivers Blog |url=https://www.r-bloggers.com/2022/04/new-features-in-r-4-2-0/ |access-date=2022-08-01 |language=en-US}}</ref> All currently supported versions of [[Python (language)|Python]] support UTF-8 for I/O, even on Windows (where it is opt-in for the <code>open()</code> function<ref>{{cite web |title=PEP&nbsp;540 – add a new UTF-8 mode |website=peps.python.org |url=https://peps.python.org/pep-0540/ |access-date=2022-09-23}}</ref>), and plans exist to make UTF-8 I/O the default in Python&nbsp;3.15 on all platforms.<ref>{{cite web |title=PEP&nbsp;597 – add optional EncodingWarning |website=Python.org |lang=en |url=https://www.python.org/dev/peps/pep-0597/ |access-date=2021-08-24}}</ref>
[[Java (programming language)|Java]] internally uses ''Modified UTF-8'' (MUTF-8), in which the [[null character]] {{tt|U+0000}} uses the two-byte overlong encoding {{tt|0xC0}},&nbsp;{{tt|0x80}}, instead of just {{tt|0x00}}.<ref>{{cite web |title=Java SE documentation for Interface java.io.DataInput, subsection on Modified UTF-8 |url=https://docs.oracle.com/javase/8/docs/enwiki/api/java/io/DataInput.html#modified-utf-8 |year=2015 |publisher=[[Oracle Corporation]] |access-date=2015-10-16}}</ref> Modified UTF-8 strings never contain any actual null bytes but can contain all Unicode code points including U+0000,<ref>{{cite web |url=https://docs.oracle.com/javase/specs/jvms/se8/html/jvms-4.html#jvms-4.4.7 |title=The Java Virtual Machine Specification, section 4.4.7: "The CONSTANT_Utf8_info Structure" |publisher=[[Oracle Corporation]] |year=2015 |access-date=2015-10-16}}</ref> which allows such strings (with a null byte appended) to be processed by traditional [[null-terminated string]] functions. Java reads and writes normal UTF-8 to files and streams,<ref>{{Javadoc:SE|java/io|InputStreamReader}} and {{Javadoc:SE|java/io|OutputStreamWriter}}</ref> but it uses Modified UTF-8 for object [[Java serialization|serialization]],<ref>{{cite web |title=Java Object Serialization Specification, chapter 6: Object Serialization Stream Protocol, section 2: Stream Elements |url=https://docs.oracle.com/javase/8/docs/platform/serialization/spec/protocol.html#a8299 |year=2010 |publisher=[[Oracle Corporation]] |access-date=2015-10-16}}</ref><ref>{{Javadoc:SE|java/io|DataInput}} and {{Javadoc:SE|java/io|DataOutput}}</ref> for the [[Java Native Interface]],<ref>{{cite web |url=https://docs.oracle.com/javase/8/docs/technotes/guides/jni/spec/types.html#modified_utf_8_strings |title=Java Native Interface Specification, chapter 3: JNI Types and Data Structures, section: Modified UTF-8 Strings |publisher=[[Oracle Corporation]] |year=2015 |access-date=2015-10-16}}</ref> and for embedding constant strings in [[Class (file format)|class files]].<ref>{{cite web |title=The Java Virtual Machine Specification, section 4.4.7: "The CONSTANT_Utf8_info Structure" |url=https://docs.oracle.com/javase/specs/jvms/se8/html/jvms-4.html#jvms-4.4.7 |publisher=[[Oracle Corporation]] |year=2015 |access-date=2015-10-16}}</ref> The dex format defined by [[Dalvik (software)|Dalvik]] also uses the same modified UTF-8 to represent string values.<ref>{{cite web |url=https://source.android.com/tech/dalvik/dex-format.html |title=ART and Dalvik |work=Android Open Source Project |access-date=2013-04-09 |url-status=dead |archive-url=https://web.archive.org/web/20130426010617/https://source.android.com/tech/dalvik/dex-format.html |archive-date=2013-04-26 }}</ref> [[Tcl]] also uses the same modified UTF-8<ref>{{cite web |title=UTF-8 bit by bit |date=2001-02-28 |url=https://wiki.tcl-lang.org/page/UTF-8+bit+by+bit |access-date=2022-09-03 |website=Tcler's Wiki}}</ref> as Java for internal representation of Unicode data, but uses strict CESU-8 for external data. All known Modified UTF-8 implementations also treat the surrogate pairs as in [[CESU-8]].


[[Raku (programming language)|Raku]] programming language (formerly Perl 6) uses <code>utf-8</code> encoding by default for I/O ([[Perl]] 5 also supports it<!-- "utf8 - Perl pragma to enable/disable UTF-8 (or UTF-EBCDIC) in source code" -->)<!-- "Raku applies normalization by default to all input and output except for file names, which are read and written as UTF8-C8" -->; though that choice in Raku also implies "normalization into Unicode [[Unicode equivalence#Normal forms|NFC (normalization form canonical)]]. In some cases you may want to ensure no normalization is done; for this you can use <code>utf8-c8</code>".<ref>{{Cite web |title=encoding {{!}} Raku Documentation |url=https://docs.raku.org/routine/encoding |access-date=2024-10-06 |website=docs.raku.org}}</ref> That ''UTF-8 Clean-8'' variant, implemented by Raku, is an encoder/decoder <!-- that primarily works as the UTF-8 one. However, upon encountering a byte sequence that will either not decode as valid UTF-8, or that would not round-trip due to normalization, it will use NFG synthetics to keep track of the original bytes involved. This means that encoding back to UTF-8 Clean-8 will be able to recreate the bytes as they originally existed. The synthetics contain four codepoints: ... --> that preserves bytes as is (even illegal UTF-8 sequences) and allows for Normal Form Grapheme synthetics.<ref>{{Cite web |title=Unicode {{!}} Raku Documentation |url=https://docs.raku.org/language/unicode#UTF8-C8 |access-date=2024-10-06 |website=docs.raku.org}}</ref>
Usage of UTF-8 within software is also lower than in other areas ([[UTF-16]] is often used instead). This occurs particularly in Windows, but also in [[JavaScript]], Python,{{efn|Python uses a number of encodings for what it calls "Unicode", however none of these encodings are UTF-8. Python&nbsp;2 and early version&nbsp;3 used UTF-16 on Windows and UTF-32 on Unix. More recent implementations of Python&nbsp;3 use three fixed-length encodings: [[ISO-8859-1]], UCS-2, and UTF-32, depending on the maximum code point needed.<ref>{{cite web |title=PEP&nbsp;393 – flexible string representation |website=Python.org |lang=en |url=https://peps.python.org/pep-0393 |access-date=2022-05-18}}</ref>}} [[Qt (software)|Qt]], and many other cross-platform software libraries. Compatibility with the [[Unicode in Microsoft Windows|Windows API]] is the primary reason for this, though the belief that direct indexing of the [[Basic Multilingual Plane|BMP]] improves speed was also a factor. More recent software has started to use UTF-8 almost exclusively: The default string primitive in [[Go (programming language)|Go]],<ref>{{cite report |section=Source code representation |title=The Go Programming Language Specification |website=golang.org |section-url=https://golang.org/ref/spec#Source_code_representation |access-date=2021-02-10}}</ref> [[Julia (programming language)|Julia]], [[Rust (programming language)|Rust]], [[Swift (programming language)#String support|Swift&nbsp;5]],<ref>{{cite web |last=Tsai |first=Michael J. |date=21 March 2019 |title=UTF-8 string in Swift&nbsp;5 |type=blog |lang=en |url=https://mjtsai.com/blog/2019/03/21/utf-8-string-in-swift-5/ |access-date=2021-03-15 |quote=Switching to UTF-8 fulfills one of string's long-term goals, to enable high-performance processing, [...] also lays the groundwork for providing even more performant APIs in the future.}}</ref> and [[PyPy]]<ref>{{cite web |department=Mattip |date=2019-03-24 |title=PyPy v7.1 released; now uses UTF-8 internally for Unicode strings |website=PyPy status blog |url=https://morepypy.blogspot.com/2019/03/pypy-v71-released-now-uses-utf-8.html |access-date=2020-11-21}}</ref> uses UTF-8; a future version of Python is planned to store strings as UTF-8;<ref>{{cite web |title=PEP&nbsp;623 – remove wstr from Unicode |website=Python.org |lang=en |url=https://www.python.org/dev/peps/pep-0623/ |access-date=2020-11-21 |quote=Until we drop [the] legacy Unicode object, it is very hard to try other Unicode implementation[s], like UTF-8 based implementation in PyPy.}}</ref> and modern versions of [[Microsoft Visual Studio]] use UTF-8 internally.<ref>{{cite web |title=/validate-charset (validate for compatible characters) |website=docs.microsoft.com |lang=en-us |url=https://docs.microsoft.com/en-us/cpp/build/reference/validate-charset-validate-for-compatible-characters |access-date=2021-07-19 |quote=Visual Studio uses UTF-8 as the internal character encoding during conversion between the source character set and the execution character set.}}</ref> Microsoft's SQL Server 2019 added support for UTF-8, and using it results in a 35% speed increase, and "nearly 50% reduction in storage requirements."<ref>{{Cite web|date=2019-07-02|title=Introducing UTF-8 support for SQL Server|url=https://techcommunity.microsoft.com/t5/sql-server/introducing-utf-8-support-for-sql-server/ba-p/734928|quote=For example, changing an existing column data type from NCHAR(10) to CHAR(10) using an UTF-8 enabled collation, translates into nearly 50% reduction in storage requirements. [..] In the ASCII range, when doing intensive read/write I/O on UTF-8<!-- " " in quote, but ok to strip-->, we measured an average 35% performance improvement over UTF-16 using clustered tables with a non-clustered index on the string column, and an average 11% performance improvement over UTF-16 using a heap. |access-date=2021-08-24|website=techcommunity.microsoft.com|language=en}}</ref> UTF-8 is the "only text encoding mandated to be supported by the C++ standard" in [[C++20]].<ref>{{cite web |title=Absent std::u8string in C++11 |website=NewbeDEV |lang=en-US |url=https://newbedev.com/absent-std-u8string-in-c-11 |access-date=2021-11-01}}</ref> [[C++23]] adopts UTF-8 as the only portable source code file format (surprisingly there was none before).<ref>{{Cite web |title=Support for UTF-8 as a portable source file encoding |url=https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2022/p2295r6.pdf}}</ref>


Version 3 of the [[Python (programming language)|Python]] programming language treats each byte of an invalid UTF-8 bytestream as an error (see also changes with new UTF-8 mode in Python 3.7<ref>{{Cite web|title=PEP 540 -- Add a new UTF-8 Mode|url=https://www.python.org/dev/peps/pep-0540/|access-date=2021-03-24|website=Python.org|language=en}}</ref>); this gives 128 different possible errors. Extensions have been created to allow any byte sequence that is assumed to be UTF-8 to be losslessly transformed to UTF-16 or UTF-32, by translating the 128 possible error bytes to reserved code points, and transforming those code points back to error bytes to output UTF-8. The most common approach is to translate the codes to U+DC80...U+DCFF which are low (trailing) surrogate values and thus "invalid" UTF-16, as used by [[Python (programming language)|Python]]'s [[Python Enhancement Proposal|PEP]] 383 (or "surrogateescape") approach.<ref name="pep383">{{cite web |id=PEP 383 |title=Non-decodable Bytes in System Character Interfaces |url=https://www.python.org/dev/peps/pep-0383 |publisher=[[Python Software Foundation]] |language=en |first=Martin |last=von Löwis |date=2009-04-22}}</ref> Another encoding called [[MirBSD]] OPTU-8/16 converts them to U+EF80...U+EFFF in a [[Private Use Area]].<ref>{{cite web |title=RTFM optu8to16(3), optu8to16vis(3) |url=https://www.mirbsd.org/htman/i386/man3/optu8to16.htm |website=www.mirbsd.org}}</ref> In either approach, the byte value is encoded in the low eight bits of the output code point. These encodings are needed if invalid UTF-8 is to survive translation to and then back from the UTF-16 used internally by Python, and as Unix filenames can contain invalid UTF-8 it is necessary for this to work.<ref name="davis383">{{cite web |url=https://www.unicode.org/reports/tr36/#EnablingLosslessConversion |last1=Davis |first1=Mark |author-link1=Mark Davis (Unicode) |first2=Michel |last2=Suignard |title=3.7 Enabling Lossless Conversion |work=Unicode Security Considerations |id=Unicode Technical Report #36 |year=2014}}</ref>
All currently supported Windows versions support UTF-8 in some way (including [[Xbox]]);<ref name="Microsoft GDK" /> partial support has existed since at least [[Windows XP]]. {{As of|2019|05}}, Microsoft has reversed its previous position of only recommending UTF-16; the capability to set UTF-8 as the "code page" for the Windows API was introduced; and [[Unicode in Microsoft Windows|Microsoft recommends]] programmers use UTF-8,<ref name=Microsoft-UTF-8>{{cite web |title=Use the Windows UTF-8 code page – UWP applications |website=docs.microsoft.com |lang=en-us |url=https://docs.microsoft.com/en-us/windows/uwp/design/globalizing/use-utf8-code-page |access-date=2020-06-06 |quote=As of Windows version&nbsp;1903 (May&nbsp;2019 update), you can use the ActiveCodePage property in the appxmanifest for packaged apps, or the fusion manifest for unpackaged apps, to force a process to use UTF-8 as the process code page. [...] <code>CP_ACP</code> equates to <code>CP_UTF8</code> only if running on Windows version&nbsp;1903 (May&nbsp;2019 update) or above and the ActiveCodePage property described above is set to UTF-8. Otherwise, it honors the legacy system code page. We recommend using <code>CP_UTF8</code> explicitly.}}</ref> and even states "UTF-16 [..] is a unique burden that Windows places on code that targets multiple platforms."<ref name="Microsoft GDK">{{Cite web |title=UTF-8 support in the Microsoft Game Development Kit (GDK) - Microsoft Game Development Kit |url=https://learn.microsoft.com/en-us/gaming/gdk/_content/gc/system/overviews/utf-8 |access-date=2023-03-05 |website=learn.microsoft.com |language=en-us |quote=By operating in UTF-8, you can ensure maximum compatibility [..] Windows operates natively in UTF-16 (or WCHAR), which requires code page conversions by using MultiByteToWideChar and WideCharToMultiByte. This is a unique burden that Windows places on code that targets multiple platforms. [..] The Microsoft Game Development Kit (GDK) and Windows in general are moving forward to support UTF-8 to remove this unique burden of Windows on code targeting or interchanging with multiple platforms and the web. Also, this results in fewer internationalization issues in apps and games and reduces the test matrix that's required to get it right.}}</ref>


== History ==
== Standards ==
{{See also|Universal Coded Character Set#History}}


The official name for the encoding is {{code|UTF-8}}, the spelling used in all Unicode Consortium documents. The [[hyphen-minus]] is required and no spaces are allowed. Some other names used are:
The [[International Organization for Standardization]] (ISO) set out to compose a universal multi-byte character set in 1989. The draft ISO 10646 standard contained a non-required [[Addendum|annex]] called UTF-1 that provided a byte stream encoding of its [[32-bit computing|32-bit]] code points. This encoding was not satisfactory on performance grounds, among other problems, and the biggest problem was probably that it did not have a clear separation between ASCII and non-ASCII: new UTF-1 tools would be backward compatible with ASCII-encoded text, but UTF-1-encoded text could confuse existing code expecting ASCII (or [[extended ASCII]]), because it could contain continuation bytes in the range 0x21–0x7E that meant something else in ASCII, e.g., 0x2F for '/', the [[Unix]] [[Path (computing)|path]] directory separator, and this example is reflected in the name and introductory text of its replacement. The table below was derived from a textual description in the annex.


* Most standards are also case-insensitive and <code>utf-8</code> is often used.{{citation needed|date=March 2023}}
{| class="wikitable"
* Web standards (which include [[Cascading Style Sheets|CSS]], [[HTML]], [[XML]], and [[HTTP headers]]) also allow {{code|utf8}} and many other aliases<!-- e.g. "unicode20utf8" for UTF-8, likely not useful to list any or all, just stating "many"-->.<ref>{{cite web|url=https://encoding.spec.whatwg.org/#names-and-labels|title=Encoding Standard § 4.2. Names and labels|publisher=[[WHATWG]]|access-date=2018-04-29}}</ref>
|+ [[UTF-1]]
* The official [[Internet Assigned Numbers Authority]] lists {{code|csUTF8}} as the only alias,<ref name="IANA_2013_CS">{{cite web |publisher=[[Internet Assigned Numbers Authority]] |url=https://www.iana.org/assignments/character-sets |title=Character Sets |date=2013-01-23 |access-date=2013-02-08}}</ref> which is rarely used.
|-
* In some locales {{code|UTF-8N}} means UTF-8 ''without'' a [[byte order mark|byte-order mark]] (BOM), and in this case {{code|UTF-8}} ''may'' imply there ''is'' a BOM.<ref>{{cite web |url=https://suika.fam.cx/~wakaba/wiki/sw/n/BOM |title=BOM | work = suikawiki |archive-url=https://web.archive.org/web/20090117052232/https://suika.fam.cx/~wakaba/wiki/sw/n/BOM |archive-date=2009-01-17 |language=ja}}</ref><ref>{{cite web |author-last=Davis |author-first=Mark |author-link=Mark Davis (Unicode) |title=Forms of Unicode |publisher=[[IBM]] |url=https://www-128.ibm.com/developerworks/library/utfencodingforms/index.html |access-date=2013-09-18 |archive-url=https://web.archive.org/web/20050506211548/https://www-128.ibm.com/developerworks/library/utfencodingforms/index.html |archive-date=2005-05-06}}</ref>
! Number<br/>of bytes!!First<br/>code point!!Last<br/>code point!!Byte 1!!Byte 2!!Byte 3!!Byte 4!!Byte 5
* In [[Windows]], UTF-8 is [[Windows code page|codepage]] <code>65001</code><ref>{{Cite web |url=https://www.dostips.com/forum/viewtopic.php?t=5357 |title=UTF-8 codepage 65001 in Windows 7 - part I |author=Liviu |quote=Previously under XP (and, unverified, but probably Vista, too) for loops simply did not work while codepage 65001 was active |language=en-gb |date=2014-02-07 |access-date=2018-01-30}}</ref> with the symbolic name <code>CP_UTF8</code> in source code.
|-
* In [[MySQL]], UTF-8 is called <code>utf8mb4</code>,<ref>{{Cite web |title=MySQL :: MySQL 8.0 Reference Manual :: 10.9.1 The utf8mb4 Character Set (4-Byte UTF-8 Unicode Encoding) |url=https://dev.mysql.com/doc/refman/8.0/en/charset-unicode-utf8mb4.html |work=MySQL 8.0 Reference Manual |publisher=[[Oracle Corporation]] |access-date=2023-03-14}}</ref> while {{code|utf8}} and {{code|utf8mb3}} refer to the obsolete [[CESU-8]] variant.<ref name="mysql3-utf8mb3">{{Cite web |title=MySQL :: MySQL 8.0 Reference Manual :: 10.9.2 The utf8mb3 Character Set (3-Byte UTF-8 Unicode Encoding) |url=https://dev.mysql.com/doc/refman/8.0/en/charset-unicode-utf8mb3.html |work=MySQL 8.0 Reference Manual |publisher=[[Oracle Corporation]] |access-date=2023-02-24}}</ref>
| style="text-align: center;" |1
* In [[Oracle Database]] (since version 9.0), <code>AL32UTF8</code><ref>{{Cite web |title=Database Globalization Support Guide |url=https://docs.oracle.com/cd/E11882_01/server.112/e10729/ch6unicode.htm |access-date=2023-03-16 |website=docs.oracle.com |language=en}}</ref> means UTF-8, while {{code|UTF-8}} means CESU-8.
| style="text-align: right;" |U+0000
* In HP [[Printer Command Language|PCL]], the Symbol-ID for UTF-8 is <code>18N</code>.<ref>{{Cite web|url=http://pclhelp.com/pcl-symbol-sets/|archive-url=https://web.archive.org/web/20150219212843/http://pclhelp.com/pcl-symbol-sets/|url-status=dead|archive-date=2015-02-19|title=HP PCL Symbol Sets {{!}} Printer Control Language (PCL & PXL) Support Blog|date=2015-02-19|access-date=2018-01-30}}</ref>
| style="text-align: right;" |U+009F
| style="text-align: center;" |00–9F
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |2
| style="text-align: right;" |U+00A0
| style="text-align: right;" |U+00FF
| style="text-align: center;" |A0
| style="text-align: right;" |A0–FF
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |2
| style="text-align: right;" |U+0100
| style="text-align: right;" |U+4015
| style="text-align: center;" |A1–F5
| style="text-align: right;" |21–7E, A0–FF
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |3
| style="text-align: right;" |U+4016
| style="text-align: right;" |U+38E2D
| style="text-align: center;" |F6–FB
| style="text-align: right;" |21–7E, A0–FF
| style="text-align: right;" |21–7E, A0–FF
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |5
| style="text-align: right;" |U+38E2E
| style="text-align: right;" |U+7FFFFFFF
| style="text-align: center;" |FC–FF
| style="text-align: right;" |21–7E, A0–FF
| style="text-align: right;" |21–7E, A0–FF
| style="text-align: right;" |21–7E, A0–FF
| style="text-align: right;" |21–7E, A0–FF
|}

In July 1992, the [[X/Open]] committee XoJIG was looking for a better encoding. Dave Prosser of [[Unix System Laboratories]] submitted a proposal for one that had faster implementation characteristics and introduced the improvement that 7-bit ASCII characters would only represent themselves; all multi-byte sequences would include only bytes where the high bit was set. The name File System Safe [[Universal Character Set|UCS]] Transformation Format (FSS-UTF) and most of the text of this proposal were later preserved in the final specification.<ref name="FSS-UTF">{{cite journal |title=Appendix F. FSS-UTF / File System Safe UCS Transformation format |journal=The Unicode Standard 1.1 |url=https://www.unicode.org/versions/Unicode1.1.0/appF.pdf |access-date=2016-06-07 |url-status=live |archive-url=https://web.archive.org/web/20160607215950/https://www.unicode.org/versions/Unicode1.1.0/appF.pdf |archive-date=2016-06-07}}</ref><ref name="Whistler_2001">{{cite web |title=FSS-UTF, UTF-2, UTF-8, and UTF-16 |author-first=Kenneth |author-last=Whistler |date=2001-06-12 |url=https://unicode.org/mail-arch/unicode-ml/y2001-m06/0318.html |access-date=2006-06-07 |url-status=live |archive-url=https://web.archive.org/web/20160607220249/https://unicode.org/mail-arch/unicode-ml/y2001-m06/0318.html |archive-date=2016-06-07 }}</ref><ref name="pikeviacambridge">{{cite web |url=https://www.cl.cam.ac.uk/~mgk25/ucs/utf-8-history.txt |title=UTF-8 history |author-first=Rob |author-last=Pike |author-link=Rob Pike |date=2003-04-30 |access-date=2012-09-07}}</ref><ref>{{cite web |url=https://plus.google.com/u/0/101960720994009339267/posts/Rz1udTvtiMg |title=UTF-8 turned 20 years old yesterday |author-first=Rob |author-last=Pike |author-link=Rob Pike |date=2012-09-06 |access-date=2012-09-07}}</ref>

=== FSS-UTF ===
{| class="wikitable"
|+FSS-UTF proposal (1992)
|-
!Number<br/>of bytes!!First<br/>code point!!Last<br/>code point!!Byte 1!!Byte 2!!Byte 3!!Byte 4!!Byte 5
|-
| style="text-align: center;" |1
| style="text-align: right;" |U+0000
| style="text-align: right;" |U+007F
|{{mono|0xxxxxxx}}
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |2
| style="text-align: right;" |U+0080
| style="text-align: right;" |U+207F
|{{mono|10xxxxxx}}||{{mono|1xxxxxxx}}
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |3
| style="text-align: right;" |U+2080
| style="text-align: right;" |U+8207F
|{{mono|110xxxxx}}||{{mono|1xxxxxxx}}||{{mono|1xxxxxxx}}
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |4
| style="text-align: right;" |U+82080
| style="text-align: right;" |U+208207F
|{{mono|1110xxxx}}||{{mono|1xxxxxxx}}||{{mono|1xxxxxxx}}||{{mono|1xxxxxxx}}
| style="background: darkgray;" |
|-
| style="text-align: center;" |5
| style="text-align: right;" |U+2082080
| style="text-align: right;" |U+7FFFFFFF
|{{mono|11110xxx}}||{{mono|1xxxxxxx}}||{{mono|1xxxxxxx}}||{{mono|1xxxxxxx}}||{{mono|1xxxxxxx}}
|}

In August 1992, this proposal was circulated by an [[IBM]] X/Open representative to interested parties. A modification by [[Ken Thompson]] of the [[Plan 9 from Bell Labs|Plan 9]] [[operating system]] group at [[Bell Labs]] made it [[Self-synchronizing code|self-synchronizing]], letting a reader start anywhere and immediately detect character boundaries, at the cost of being somewhat less bit-efficient than the previous proposal. It also abandoned the use of biases and instead added the rule that only the shortest possible encoding is allowed; the additional loss in compactness is relatively insignificant, but readers now have to look out for invalid encodings to avoid reliability and especially security issues. Thompson's design was outlined on September 2, 1992, on a [[placemat]] in a New Jersey diner with [[Rob Pike]]. In the following days, Pike and Thompson implemented it and updated [[Plan 9 from Bell Labs|Plan 9]] to use it throughout, and then communicated their success back to X/Open, which accepted it as the specification for FSS-UTF.<ref name=pikeviacambridge/>

{| class="wikitable"
|+ FSS-UTF (1992) / UTF-8 (1993)<ref name="mgk25" />
|-
! Number<br/>of bytes!!First<br/>code point!!Last<br/>code point!!Byte 1!!Byte 2!!Byte 3!!Byte 4!!Byte 5!!Byte 6
|-
| style="text-align: center;" |1
| style="text-align: right;" |U+0000
| style="text-align: right;" |U+007F
|{{mono|0xxxxxxx}}
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |2
| style="text-align: right;" |U+0080
| style="text-align: right;" |U+07FF
|{{mono|110xxxxx}}||{{mono|10xxxxxx}}
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |3
| style="text-align: right;" |U+0800
| style="text-align: right;" |U+FFFF
|{{mono|1110xxxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}
| style="background: darkgray;" |
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |4
| style="text-align: right;" |U+10000
| style="text-align: right;" |U+1FFFFF
|{{mono|11110xxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}
| style="background: darkgray;" |
| style="background: darkgray;" |
|-
| style="text-align: center;" |5
| style="text-align: right;" |U+200000
| style="text-align: right;" |U+3FFFFFF
|{{mono|111110xx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}
| style="background: darkgray;" |
|-
| style="text-align: center;" |6
| style="text-align: right;" |U+4000000
| style="text-align: right;" |U+7FFFFFFF
|{{mono|1111110x}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}||{{mono|10xxxxxx}}
|}

UTF-8 was first officially presented at the [[USENIX]] conference in [[San Diego]], from January 25 to 29, 1993. The [[Internet Engineering Task Force]] adopted UTF-8 in its Policy on Character Sets and Languages in RFC&nbsp;2277 ([[Request_for_Comments#Best Current Practice|<abbr title="Best Current Practice">BCP</abbr>]] 18) for future internet standards work, replacing [[Single Byte Character Set]]s such as [[ISO/IEC 8859-1|Latin-1]] in older RFCs.<ref>{{cite IETF |bcp=18 |title=IETF Policy on Character Sets and Languages |date=January 1998 |first=Harald |last=Alvestrand |author-link=Harald Alvestrand |doi=10.17487/RFC2277}}</ref>

In November 2003, UTF-8 was restricted by {{IETF RFC|3629}} to match the constraints of the [[UTF-16]] character encoding: explicitly prohibiting code points corresponding to the high and low surrogate characters removed <!-- 2*2^10/(2^16-2^11) --> more than 3% of the three-byte sequences, and ending at U+10FFFF removed <!-- (2^21-(2^16+2^20))/(2^21-2^16) --> more than 48% of the four-byte sequences and all five- and six-byte sequences.

== Standards ==


There are several current definitions of UTF-8 in various standards documents:
There are several current definitions of UTF-8 in various standards documents:
Line 670: Line 173:
* {{IETF RFC|3629|link=no}} / STD 63 (2003), which establishes UTF-8 as a standard internet protocol element
* {{IETF RFC|3629|link=no}} / STD 63 (2003), which establishes UTF-8 as a standard internet protocol element
* {{IETF RFC|5198|link=no}} defines UTF-8 [[Unicode equivalence|NFC]] for Network Interchange (2008)
* {{IETF RFC|5198|link=no}} defines UTF-8 [[Unicode equivalence|NFC]] for Network Interchange (2008)
* ISO/IEC 10646:2014 §9.1 (2014)<ref>[https://www.iso.org/iso/home/store/catalogue_ics/catalogue_detail_ics.htm?csnumber=63182 ISO/IEC 10646:2014 §9.1], 2014.</ref>
* ISO/IEC 10646:2020-1 §9.1 (2020)<ref>[https://www.iso.org/standard/76835.html ISO/IEC 10646:2020 §9.1], 2020.</ref>
* ''The Unicode Standard, Version 14.0.0'' (2021)<ref>''[https://www.unicode.org/versions/Unicode14.0.0/ The Unicode Standard, Version 14.0]'' [https://www.unicode.org/versions/Unicode14.0.0/ch03.pdf#G31703 §3.9 D92, §3.10 D95], 2021.</ref>
* ''The Unicode Standard, Version 16.0.0'' (2024)<ref>''[https://www.unicode.org/versions/Unicode16.0.0/ The Unicode Standard, Version 16.0]'' [https://www.unicode.org/versions/Unicode15.0.0/ch03.pdf#G31703 §3.9 D92, §3.10 D95], 2021.</ref>


They supersede the definitions given in the following obsolete works:
They supersede the definitions given in the following obsolete works:
Line 685: Line 188:


They are all the same in their general mechanics, with the main differences being on issues such as allowed range of code point values and safe handling of invalid input.
They are all the same in their general mechanics, with the main differences being on issues such as allowed range of code point values and safe handling of invalid input.

== Comparison with other encodings ==
{{See also|Comparison of Unicode encodings}}

Some of the important features of this encoding are as follows:

* ''Backward compatibility:'' Backward compatibility with ASCII and the enormous amount of software designed to process ASCII-encoded text was the main driving force behind the design of UTF-8. In UTF-8, single bytes with values in the range of 0 to 127 map directly to Unicode code points in the ASCII range. Single bytes in this range represent characters, as they do in ASCII. Moreover, 7-bit bytes (bytes where the most significant bit is 0) never appear in a multi-byte sequence, and no valid multi-byte sequence decodes to an ASCII code-point. A sequence of 7-bit bytes is both valid ASCII and valid UTF-8, and under either interpretation represents the same sequence of characters. Therefore, the 7-bit bytes in a UTF-8 stream represent all and only the ASCII characters in the stream. Thus, many text processors, parsers, protocols, file formats, text display programs, etc., which use ASCII characters for formatting and control purposes, will continue to work as intended by treating the UTF-8 byte stream as a sequence of single-byte characters, without decoding the multi-byte sequences. ASCII characters on which the processing turns, such as punctuation, whitespace, and control characters will never be encoded as multi-byte sequences. It is therefore safe for such processors to simply ignore or pass-through the multi-byte sequences, without decoding them. For example, ASCII whitespace may be used to [[tokenize]] a UTF-8 stream into words; ASCII line-feeds may be used to split a UTF-8 stream into lines; and ASCII NUL characters can be used to split UTF-8-encoded data into null-terminated strings. Similarly, many format strings used by library functions like "printf" will correctly handle UTF-8-encoded input arguments.
* {{anchor|fallback and auto-detection}}''Fallback and auto-detection:'' Only a small subset of possible byte strings are a valid UTF-8 string: several bytes cannot appear; a byte with the high bit set cannot be alone; and further requirements mean that it is extremely unlikely that a readable text in any [[extended ASCII]] is valid UTF-8. Part of the popularity of UTF-8 is due to it providing a form of backward compatibility for these as well. A UTF-8 processor which erroneously receives extended ASCII as input can thus "auto-detect" this with very high reliability. A UTF-8 stream may simply contain errors, resulting in the auto-detection scheme producing false positives; but auto-detection is successful in the vast majority of cases, especially with longer texts, and is widely used. It also works to "fall back" or replace 8-bit bytes using the appropriate code-point for a legacy encoding when errors in the UTF-8 are detected, allowing recovery even if UTF-8 and legacy encoding is concatenated in the same file.
* ''[[Prefix code]]:'' The first byte indicates the number of bytes in the sequence. Reading from a stream can instantaneously decode each individual fully received sequence, without first having to wait for either the first byte of a next sequence or an end-of-stream indication. The length of multi-byte sequences is easily determined by humans as it is simply the number of high-order 1s in the leading byte. An incorrect character will not be decoded if a stream ends mid-sequence.
* ''[[Self-synchronizing code|Self-synchronization]]:'' The leading bytes and the continuation bytes do not share values (continuation bytes start with the bits {{mono|10}} while single bytes start with {{mono|0}} and longer lead bytes start with {{mono|11}}). This means a search will not accidentally find the sequence for one character starting in the middle of another character. It also means the start of a character can be found from a random position by backing up at most 3 bytes to find the leading byte. An incorrect character will not be decoded if a stream starts mid-sequence, and a shorter sequence will never appear inside a longer one.
* ''Sorting order:'' The chosen values of the leading bytes means that a list of UTF-8 strings can be sorted in code point order by sorting the corresponding byte sequences.

=== Single-byte ===

* UTF-8 can encode any [[Universal Character Set characters|Unicode character]], avoiding the need to figure out and set a "[[code page]]" or otherwise indicate what character set is in use, and allowing output in multiple scripts at the same time. For many scripts there have been more than one single-byte encoding in usage, so even knowing the script was insufficient information to display it correctly.
* The bytes 0xFE and 0xFF do not appear, so a valid UTF-8 stream never matches the UTF-16 [[byte order mark]] and thus cannot be confused with it. The absence of 0xFF (0377) also eliminates the need to escape this byte in [[Telnet]] (and FTP control connection).
* UTF-8 encoded text is larger than specialized single-byte encodings except for plain ASCII characters. In the case of scripts which used 8-bit character sets with non-Latin characters encoded in the upper half (such as most [[Cyrillic script|Cyrillic]] and [[Greek alphabet]] code pages), characters in UTF-8 will be double the size. For some scripts, such as [[Thai alphabet|Thai]] and [[Devanagari]] (which is used by various South Asian languages), characters will triple in size. There are even examples where a single byte turns into a composite character in Unicode and is thus six times larger in UTF-8. This has caused objections in India and other countries.
* It is possible in UTF-8 (or any other multi-byte encoding) to split or [[Data truncation|truncate]] a string in the middle of a character. If the two pieces are not re-appended later before interpretation as characters, this can introduce an invalid sequence at both the end of the previous section and the start of the next, and some decoders will not preserve these bytes and result in data loss. Because UTF-8 is self-synchronizing this will however never introduce a different valid character, and it is also fairly easy to move the truncation point backward to the start of a character.
* If the code points are all the same size, measurements of a fixed number of them is easy. Due to ASCII-era documentation where "character" is used as a synonym for "byte" this is often considered important. However, by measuring string positions using bytes instead of "characters" most algorithms can be easily and efficiently adapted for UTF-8. Searching for a string within a long string can for example be done byte by byte; the self-synchronization property prevents false positives.

=== Other multi-byte ===

* UTF-8 can encode any [[Unicode]] character. Files in different scripts can be displayed correctly without having to choose the correct code page or font. For instance, Chinese and Arabic can be written in the same file without specialized markup or manual settings that specify an encoding.
* UTF-8 is [[Self-synchronizing code|self-synchronizing]]: character boundaries are easily identified by scanning for well-defined bit patterns in either direction. If bytes are lost due to error or [[data corruption|corruption]], one can always locate the next valid character and resume processing. If there is a need to shorten a string to fit a specified field, the previous valid character can easily be found. Many multi-byte encodings such as {{nowrap|Shift JIS}} are much harder to resynchronize. This also means that [[byte-oriented protocol|byte-oriented]] [[string-searching algorithm]]s can be used with UTF-8 (as a character is the same as a "word" made up of that many bytes), optimized versions of byte searches can be much faster due to hardware support and lookup tables that have only 256 entries. Self-synchronization does however require that bits be reserved for these markers in every byte, increasing the size.
* Efficient to encode using simple [[bitwise operation]]s. UTF-8 does not require slower mathematical operations such as multiplication or division (unlike {{nowrap|Shift JIS}}, {{nowrap|[[GB 2312]]}} and other encodings).
* UTF-8 will take more space than a multi-byte encoding designed for a specific script. East Asian legacy encodings generally used two bytes per character yet take three bytes per character in UTF-8.

=== UTF-16 ===
{{Main|UTF-16}}

* Byte encodings and UTF-8 are represented by byte arrays in programs, and often nothing needs to be done to a function when converting source code from a byte encoding to UTF-8. [[UTF-16]] is represented by 16-bit word arrays, and converting to UTF-16 while maintaining compatibility with existing ASCII-based programs (such as was done with Windows) requires ''every'' API and data structure that takes a string to be duplicated, one version accepting byte strings and another version accepting UTF-16. If backward compatibility is not needed, all string handling still must be modified.
* Text encoded in UTF-8 will be smaller than the same text encoded in UTF-16 if there are more code points below U+0080 than in the range U+0800..U+FFFF. This is true for all modern European languages. It is often true even for languages like Chinese, due to the large number of spaces, newlines, digits, and HTML markup in typical files.
* Most communication (e.g. HTML and IP) and storage (e.g. for Unix) was designed for a [[Bitstream#Definition of bytestream|stream of bytes]]. A UTF-16 string must use a pair of bytes for each code unit:
** The order of those two bytes becomes an issue and must be specified in the UTF-16 protocol, such as with a [[byte order mark]].
** If an ''odd'' number of bytes is missing from UTF-16, the whole rest of the string will be meaningless text. Any bytes missing from UTF-8 will still allow the text to be recovered accurately starting with the next character after the missing bytes.

== Derivatives ==
The following implementations show slight differences from the UTF-8 specification. They are incompatible with the UTF-8 specification and may be rejected by conforming UTF-8 applications.

=== CESU-8 ===
{{Main|CESU-8}}

Unicode Technical Report #26<ref>{{cite web |url=https://www.unicode.org/reports/tr26/tr26-4.html |first=Rick |last=McGowan |date=2011-12-19 |title=Compatibility Encoding Scheme for UTF-16: 8-Bit (CESU-8) |id=Unicode Technical Report #26 |institution=[[Unicode Consortium]]}}</ref> assigns the name CESU-8 to a nonstandard variant of UTF-8, in which Unicode characters in [[Plane (Unicode)|supplementary planes]] are encoded using six bytes, rather than the four bytes required by UTF-8. CESU-8 encoding treats each half of a four-byte UTF-16 surrogate pair as a two-byte UCS-2 character, yielding two three-byte UTF-8 characters, which together represent the original supplementary character. Unicode characters within the [[Basic Multilingual Plane]] appear as they would normally in UTF-8. The Report was written to acknowledge and formalize the existence of data encoded as CESU-8, despite the [[Unicode Consortium]] discouraging its use, and notes that a possible intentional reason for CESU-8 encoding is preservation of UTF-16 binary collation.

CESU-8 encoding can result from converting UTF-16 data with supplementary characters to UTF-8, using conversion methods that assume UCS-2 data, meaning they are unaware of four-byte UTF-16 supplementary characters. It is primarily an issue on operating systems which extensively use UTF-16 internally, such as [[Microsoft Windows]].{{Citation needed|date=September 2020}}

In [[Oracle Database]], the {{code|UTF8}} character set uses CESU-8 encoding, and is deprecated. The {{code|AL32UTF8}} character set uses standards-compliant UTF-8 encoding, and is preferred.<ref>{{cite web |url=https://docs.oracle.com/en/database/oracle/oracle-database/19/sqlrf/Character-Set-Support.html |title=Character Set Support |work=Oracle Database 19c Documentation, SQL Language Reference |publisher=[[Oracle Corporation]]}}</ref><ref>{{cite web |url=https://docs.oracle.com/database/121/NLSPG/ch6unicode.htm#NLSPG-GUID-CD422E4F-C5C6-4E22-B95F-CA9CABBCB543 |title=Supporting Multilingual Databases with Unicode § Support for the Unicode Standard in Oracle Database |work=Database Globalization Support Guide |publisher=[[Oracle Corporation]]}}</ref>

CESU-8 is prohibited for use in [[HTML5]] documents.<ref>{{Cite web |url=https://www.w3.org/TR/html51/syntax.html#character-encodings |title=8.2.2.3. Character encodings |website=HTML 5.1 Standard |publisher=[[W3C]]}}</ref><ref>{{Cite web |url=https://www.w3.org/TR/html5/syntax.html#character-encodings |title=8.2.2.3. Character encodings |website=HTML 5 Standard |publisher=[[W3C]]}}</ref><ref>{{Cite web |url=https://html.spec.whatwg.org/multipage/parsing.html#character-encodings |title=12.2.3.3 Character encodings |website=HTML Living Standard |publisher=[[WHATWG]]}}</ref>

=== MySQL utf8mb3 ===

In [[MySQL]], the {{code|utf8mb3}} character set is defined to be UTF-8 encoded data with a maximum of three bytes per character, meaning only Unicode characters in the [[Basic Multilingual Plane]] (i.e. from [[UCS-2]]) are supported. Unicode characters in [[Plane (Unicode)|supplementary planes]] are explicitly not supported. {{code|utf8mb3}} is deprecated in favor of the {{code|utf8mb4}} character set, which uses standards-compliant UTF-8 encoding. {{code|utf8}} is an alias for {{code|utf8mb3}}, but is intended to become an alias to {{code|utf8mb4}} in a future release of MySQL.<ref name="mysql3-utf8mb3" /> It is possible, though unsupported, to store CESU-8 encoded data in {{code|utf8mb3}}, by handling UTF-16 data with supplementary characters as though it is UCS-2.

=== Modified UTF-8 ===

''Modified UTF-8'' (MUTF-8) originated in the [[Java (programming language)|Java programming language]]. In Modified UTF-8, the [[null character]] (U+0000) uses the two-byte overlong encoding {{mono|110{{fontcolor|green|00000}}}} {{mono|10{{fontcolor|red|000000}}}} (hexadecimal {{mono|{{fontcolor|green|C0}}}} {{mono|{{fontcolor|red|80}}}}), instead of {{mono|00000000}} (hexadecimal {{mono|00}}).<ref>{{cite web |title=Java SE documentation for Interface java.io.DataInput, subsection on Modified UTF-8 |url=https://docs.oracle.com/javase/8/docs/enwiki/api/java/io/DataInput.html#modified-utf-8 |year=2015 |publisher=[[Oracle Corporation]] |access-date=2015-10-16}}</ref> Modified UTF-8 strings never contain any actual null bytes but can contain all Unicode code points including U+0000,<ref>{{cite web |url=https://docs.oracle.com/javase/specs/jvms/se8/html/jvms-4.html#jvms-4.4.7 |title=The Java Virtual Machine Specification, section 4.4.7: "The CONSTANT_Utf8_info Structure" |publisher=[[Oracle Corporation]] |year=2015 |access-date=2015-10-16}}</ref> which allows such strings (with a null byte appended) to be processed by traditional [[null-terminated string]] functions. All known Modified UTF-8 implementations also treat the surrogate pairs as in [[CESU-8]].

In normal usage, the language supports standard UTF-8 when reading and writing strings through {{Javadoc:SE|java/io|InputStreamReader}} and {{Javadoc:SE|java/io|OutputStreamWriter}} (if it is the platform's default character set or as requested by the program). However it uses Modified UTF-8 for object [[Java serialization|serialization]]<ref>{{cite web |title=Java Object Serialization Specification, chapter 6: Object Serialization Stream Protocol, section 2: Stream Elements |url=https://docs.oracle.com/javase/8/docs/platform/serialization/spec/protocol.html#a8299 |year=2010 |publisher=[[Oracle Corporation]] |access-date=2015-10-16}}</ref> among other applications of {{Javadoc:SE|java/io|DataInput}} and {{Javadoc:SE|java/io|DataOutput}}, for the [[Java Native Interface]],<ref>{{cite web |url=https://docs.oracle.com/javase/8/docs/technotes/guides/jni/spec/types.html#modified_utf_8_strings |title=Java Native Interface Specification, chapter 3: JNI Types and Data Structures, section: Modified UTF-8 Strings |publisher=[[Oracle Corporation]] |year=2015 |access-date=2015-10-16}}</ref> and for embedding constant strings in [[Class (file format)|class files]].<ref>{{cite web |title=The Java Virtual Machine Specification, section 4.4.7: "The CONSTANT_Utf8_info Structure" |url=https://docs.oracle.com/javase/specs/jvms/se8/html/jvms-4.html#jvms-4.4.7 |publisher=[[Oracle Corporation]] |year=2015 |access-date=2015-10-16}}</ref>

The dex format defined by [[Dalvik (software)|Dalvik]] also uses the same modified UTF-8 to represent string values.<ref>{{cite web |url=https://source.android.com/tech/dalvik/dex-format.html |title=ART and Dalvik |work=Android Open Source Project |access-date=2013-04-09 |url-status=dead |archive-url=https://web.archive.org/web/20130426010617/https://source.android.com/tech/dalvik/dex-format.html |archive-date=2013-04-26 }}</ref> [[Tcl]] also uses the same modified UTF-8<ref>{{cite web |title=UTF-8 bit by bit |date=2001-02-28 |url=https://wiki.tcl-lang.org/page/UTF-8+bit+by+bit |access-date=2022-09-03 |website=Tcler's Wiki}}</ref> as Java for internal representation of Unicode data, but uses strict CESU-8 for external data.

=== WTF-8 ===
{{trivia|section|date=August 2020}}

In WTF-8 (Wobbly Transformation Format, 8-bit) ''unpaired'' surrogate halves (U+D800 through U+DFFF) are allowed.<ref name="Sapin_2016">{{cite web |title=The WTF-8 encoding |author-first=Simon |author-last=Sapin |date=2016-03-11 |orig-year=2014-09-25 |url=https://simonsapin.github.io/wtf-8/ |access-date=2016-05-24 |url-status=live |archive-url=https://web.archive.org/web/20160524180037/https://simonsapin.github.io/wtf-8/ |archive-date=2016-05-24}}</ref> This is necessary to store possibly-invalid UTF-16, such as Windows filenames. Many systems that deal with UTF-8 work this way without considering it a different encoding, as it is simpler.<ref name="Sapin_2018">{{cite web |title=The WTF-8 encoding § Motivation |author-first=Simon |author-last=Sapin |date=2015-03-25 |orig-year=2014-09-25 |url=https://simonsapin.github.io/wtf-8/#motivation |access-date=2020-08-26 |url-status=live |archive-url=https://web.archive.org/web/20200816090721/https://simonsapin.github.io/wtf-8/#motivation |archive-date=2020-08-16 }}</ref>

The term "WTF-8" has also been used humorously to refer to [[Mojibake|erroneously doubly-encoded UTF-8]]<ref name="wtf8_2016">{{cite web|title=WTF-8.com|date=2006-05-18|url=http://wtf-8.com/|access-date=2016-06-21}}</ref><ref name="Speer_2016">{{cite web|title=ftfy (fixes text for you) 4.0: changing less and fixing more|author-first=Robyn|author-last=Speer|date=2015-05-21|url=https://blog.luminoso.com/2015/05/21/ftfy-fixes-text-for-you-4-0-changing-less-and-fixing-more/|access-date=2016-06-21|archive-url=https://web.archive.org/web/20150530150039/https://blog.luminoso.com/2015/05/21/ftfy-fixes-text-for-you-4-0-changing-less-and-fixing-more/|archive-date=2015-05-30}}</ref> sometimes with the implication that [[CP1252]] bytes are the only ones encoded.<ref>{{Cite web|url=http://www-uxsup.csx.cam.ac.uk/~fanf2/hermes/doc/qsmtp/draft-fanf-wtf8.html|title=WTF-8, a transformation format of code page 1252|access-date=2016-10-12 | url-status = dead | archive-url = https://web.archive.org/web/20161013072641/http://www-uxsup.csx.cam.ac.uk/~fanf2/hermes/doc/qsmtp/draft-fanf-wtf8.html | archive-date = 2016-10-13 }}</ref>

=== PEP 383 ===

Version 3 of the [[Python (programming language)|Python]] programming language treats each byte of an invalid UTF-8 bytestream as an error (see also changes with new UTF-8 mode in Python 3.7<ref>{{Cite web|title=PEP 540 -- Add a new UTF-8 Mode|url=https://www.python.org/dev/peps/pep-0540/|access-date=2021-03-24|website=Python.org|language=en}}</ref>); this gives 128 different possible errors. Extensions have been created to allow any byte sequence that is assumed to be UTF-8 to be losslessly transformed to UTF-16 or UTF-32, by translating the 128 possible error bytes to reserved code points, and transforming those code points back to error bytes to output UTF-8. The most common approach is to translate the codes to U+DC80...U+DCFF which are low (trailing) surrogate values and thus "invalid" UTF-16, as used by [[Python (programming language)|Python]]'s [[Python Enhancement Proposal|PEP]] 383 (or "surrogateescape") approach.<ref name="pep383">{{cite web |id=PEP 383 |title=Non-decodable Bytes in System Character Interfaces |url=https://www.python.org/dev/peps/pep-0383 |publisher=[[Python Software Foundation]] |language=en |first=Martin |last=von Löwis |date=2009-04-22}}</ref> Another encoding called [[MirBSD]] OPTU-8/16 converts them to U+EF80...U+EFFF in a [[Private Use Area]].<ref>{{cite web |title=RTFM optu8to16(3), optu8to16vis(3) |url=https://www.mirbsd.org/htman/i386/man3/optu8to16.htm |website=www.mirbsd.org}}</ref> In either approach, the byte value is encoded in the low eight bits of the output code point.

These encodings are very useful because they avoid the need to deal with "invalid" byte strings until much later, if at all, and allow "text" and "data" byte arrays to be the same object. If a program wants to use UTF-16 internally these are required to preserve and use filenames that can use invalid UTF-8;<ref name="davis383">{{cite web |url=https://www.unicode.org/reports/tr36/#EnablingLosslessConversion |last1=Davis |first1=Mark |author-link1=Mark Davis (Unicode) |first2=Michel |last2=Suignard |title=3.7 Enabling Lossless Conversion |work=Unicode Security Considerations |id=Unicode Technical Report #36 |year=2014}}</ref> as the Windows filesystem API uses UTF-16, the need to support invalid UTF-8 is less there.<ref name="pep383"/>

For the encoding to be reversible, the standard UTF-8 encodings of the code points used for erroneous bytes must be considered invalid. This makes the encoding incompatible with WTF-8 or CESU-8 (though only for 128 code points). When re-encoding it is necessary to be careful of sequences of error code points which convert back to valid UTF-8, which may be used by malicious software to get unexpected characters in the output, though this cannot produce ASCII characters so it is considered comparatively safe, since malicious sequences (such as [[cross-site scripting]]) usually rely on ASCII characters.<ref name="davis383" />


== See also ==
== See also ==


* {{annotated link|Character encodings in HTML}}
* [[Alt code]]
* {{section link|Comparison of email clients|Features}}
* {{annotated link|Comparison of Unicode encodings}}
* {{annotated link|GB 18030}}
* [[Comparison of Unicode encodings]]
* {{annotated link|Iconv}}
** [[GB 18030]], a Chinese encoding, though fully supporting Unicode
* {{annotated link|Unicode and email}}
** [[UTF-EBCDIC]], a rarely used encoding, even for [[mainframe computer|mainframe]]s it was made for
* {{annotated link|Unicode and HTML}}
* [[Iconv]]
* {{section link|Percent-encoding|Current standard}}
* {{annotated link|UTF-EBCDIC}}
* [[Specials (Unicode block)]]
* [[Unicode and email]]
* [[Unicode and HTML]]
** [[Character encodings in HTML]]


== Notes ==
== References ==


{{notelist}}
{{reflist}}

== References ==
{{reflist|25em}}


== External links ==
== External links ==


* [http://doc.cat-v.org/plan_9/4th_edition/papers/utf Original UTF-8 paper] ([https://web.archive.org/web/20000917055036/http://plan9.bell-labs.com/sys/doc/utf.pdf or pdf]) for [[Plan 9 from Bell Labs]]
* [https://doc.cat-v.org/plan_9/4th_edition/papers/utf Original UTF-8 paper] ([https://web.archive.org/web/20000917055036/http://plan9.bell-labs.com/sys/doc/utf.pdf or pdf]) for [[Plan 9 from Bell Labs]]
* [https://www.cl.cam.ac.uk/~mgk25/ucs/utf-8-history.txt History of UTF-8 by Rob Pike]
* [https://www.cl.cam.ac.uk/~mgk25/ucs/utf-8-history.txt History of UTF-8 by Rob Pike]
* UTF-8 test pages:
** [http://www.user.uni-hannover.de/nhtcapri/multilingual1.html Andreas Prilop] {{Webarchive|url=https://web.archive.org/web/20171130213601/http://www.user.uni-hannover.de/nhtcapri/multilingual1.html |date=2017-11-30 }}
** [http://titus.uni-frankfurt.de/indexe.htm?/unicode/unitest.htm Jost Gippert]
** [http://www.w3.org/2001/06/utf-8-test/UTF-8-demo.html World Wide Web Consortium]
* Unix/Linux: [http://www.cl.cam.ac.uk/~mgk25/unicode.html UTF-8/Unicode FAQ], [http://www.tldp.org/HOWTO/Unicode-HOWTO.html Linux Unicode HOWTO], [https://wiki.gentoo.org/wiki/UTF-8 UTF-8 and Gentoo]
* {{YouTube|id=MijmeoH9LT4|title=Characters, Symbols and the Unicode Miracle}}
* {{YouTube|id=MijmeoH9LT4|title=Characters, Symbols and the Unicode Miracle}}

{{Unicode navigation}}
{{Unicode navigation}}
{{Character encoding}}
{{Character encoding}}

Latest revision as of 20:23, 8 January 2025

UTF-8
StandardUnicode Standard
ClassificationUnicode Transformation Format, extended ASCII, variable-length encoding
ExtendsASCII
Transforms / EncodesISO/IEC 10646 (Unicode)
Preceded byUTF-1

UTF-8 is a character encoding standard used for electronic communication. Defined by the Unicode Standard, the name is derived from Unicode Transformation Format – 8-bit.[1] Almost every webpage is stored in UTF-8.

UTF-8 is capable of encoding all 1,112,064[2] valid Unicode scalar values using a variable-width encoding of one to four one-byte (8-bit) code units.

Code points with lower numerical values, which tend to occur more frequently, are encoded using fewer bytes. It was designed for backward compatibility with ASCII: the first 128 characters of Unicode, which correspond one-to-one with ASCII, are encoded using a single byte with the same binary value as ASCII, so that a UTF-8-encoded file using only those characters is identical to an ASCII file. Most software designed for any extended ASCII can read and write UTF-8 (including on Microsoft Windows) and this results in fewer internationalization issues than any alternative text encoding.[3][4]

UTF-8 is dominant for all countries/languages on the internet, with 99% global average use, is used in most standards, often the only allowed encoding, and is supported by all modern operating systems and programming languages.

History

[edit]

The International Organization for Standardization (ISO) set out to compose a universal multi-byte character set in 1989. The draft ISO 10646 standard contained a non-required annex called UTF-1 that provided a byte stream encoding of its 32-bit code points. This encoding was not satisfactory on performance grounds, among other problems, and the biggest problem was probably that it did not have a clear separation between ASCII and non-ASCII: new UTF-1 tools would be backward compatible with ASCII-encoded text, but UTF-1-encoded text could confuse existing code expecting ASCII (or extended ASCII), because it could contain continuation bytes in the range 0x21–0x7E that meant something else in ASCII, e.g., 0x2F for /, the Unix path directory separator.

In July 1992, the X/Open committee XoJIG was looking for a better encoding. Dave Prosser of Unix System Laboratories submitted a proposal for one that had faster implementation characteristics and introduced the improvement that 7-bit ASCII characters would only represent themselves; multi-byte sequences would only include bytes with the high bit set. The name File System Safe UCS Transformation Format (FSS-UTF)[5] and most of the text of this proposal were later preserved in the final specification.[6][7][8] In August 1992, this proposal was circulated by an IBM X/Open representative to interested parties. A modification by Ken Thompson of the Plan 9 operating system group at Bell Labs made it self-synchronizing, letting a reader start anywhere and immediately detect character boundaries, at the cost of being somewhat less bit-efficient than the previous proposal. It also abandoned the use of biases that prevented overlong encodings.[8][9] Thompson's design was outlined on September 2, 1992, on a placemat in a New Jersey diner with Rob Pike. In the following days, Pike and Thompson implemented it and updated Plan 9 to use it throughout,[10] and then communicated their success back to X/Open, which accepted it as the specification for FSS-UTF.[8]

UTF-8 was first officially presented at the USENIX conference in San Diego, from January 25 to 29, 1993.[11] The Internet Engineering Task Force adopted UTF-8 in its Policy on Character Sets and Languages in RFC 2277 (BCP 18) for future internet standards work in January 1998, replacing Single Byte Character Sets such as Latin-1 in older RFCs.[12]

In November 2003, UTF-8 was restricted by RFC 3629 to match the constraints of the UTF-16 character encoding: explicitly prohibiting code points corresponding to the high and low surrogate characters removed more than 3% of the three-byte sequences, and ending at U+10FFFF removed more than 48% of the four-byte sequences and all five- and six-byte sequences.[13]

Description

[edit]

UTF-8 encodes code points in one to four bytes, depending on the value of the code point. In the following table, the characters u to z are replaced by the bits of the code point, from the positions U+uvwxyz:

Code point ↔ UTF-8 conversion
First code point Last code point Byte 1 Byte 2 Byte 3 Byte 4
U+0000 U+007F 0yyyzzzz
U+0080 U+07FF 110xxxyy 10yyzzzz
U+0800 U+FFFF 1110wwww 10xxxxyy 10yyzzzz
U+010000 U+10FFFF 11110uvv 10vvwwww 10xxxxyy 10yyzzzz

The first 128 code points (ASCII) need 1 byte. The next 1,920 code points need two bytes to encode, which covers the remainder of almost all Latin-script alphabets, and also IPA extensions, Greek, Cyrillic, Coptic, Armenian, Hebrew, Arabic, Syriac, Thaana and N'Ko alphabets, as well as Combining Diacritical Marks. Three bytes are needed for the remaining 61,440 codepoints of the Basic Multilingual Plane (BMP), including most Chinese, Japanese and Korean characters. Four bytes are needed for the 1,048,576 non-BMP code points, which include emoji, less common CJK characters, and other useful characters.[14]

This is a prefix code and it is unnecessary to read past the last byte of a code point to decode it. Unlike many earlier multi-byte text encodings such as Shift-JIS, it is self-synchronizing so searches for short strings or characters are possible and that the start of a code point can be found from a random position by backing up at most 3 bytes. The values chosen for the lead bytes means sorting a list of UTF-8 strings puts them in the same order as sorting UTF-32 strings.

Overlong encodings

[edit]

Using a row in the above table to encode a code point less than "First code point" (thus using more bytes than necessary) is termed an overlong encoding. These are a security problem because they allow the same code point to be encoded in multiple ways. Overlong encodings (of ../ for example) have been used to bypass security validations in high-profile products including Microsoft's IIS web server[15] and Apache's Tomcat servlet container.[16] Overlong encodings should therefore be considered an error and never decoded. Modified UTF-8 allows an overlong encoding of U+0000.

Byte map

[edit]

The chart below gives the detailed meaning of each byte in a stream encoded in UTF-8.

0 1 2 3 4 5 6 7 8 9 A B C D E F
0
1
2 ! " # $ % & ' ( ) * + , - . /
3 0 1 2 3 4 5 6 7 8 9 : ; < = > ?
4 @ A B C D E F G H I J K L M N O
5 P Q R S T U V W X Y Z [ \ ] ^ _
6 ` a b c d e f g h i j k l m n o
7 p q r s t u v w x y z { | } ~
8
9
A
B
C 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2
D 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2
E 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3
F 4 4 4 4 4 4 4 4 5 5 5 5 6 6
ASCII control character
ASCII character
Continuation byte
First byte of a 2-byte code point
First byte of a 3-byte code point
First byte of a 4-byte code point
Unused

Error handling

[edit]

Not all sequences of bytes are valid UTF-8. A UTF-8 decoder should be prepared for:

  • Bytes that never appear in UTF-8: 0xC0, 0xC1, 0xF50xFF
  • A "continuation byte" (0x800xBF) at the start of a character
  • A non-continuation byte (or the string ending) before the end of a character
  • An overlong encoding (0xE0 followed by less than 0xA0, or 0xF0 followed by less than 0x90)
  • A 4-byte sequence that decodes to a value greater than U+10FFFF (0xF4 followed by 0x90 or greater)

Many of the first UTF-8 decoders would decode these, ignoring incorrect bits. Carefully crafted invalid UTF-8 could make them either skip or create ASCII characters such as NUL, slash, or quotes, leading to security vulnerabilities. It is also common to throw an exception or truncate the string at an error[17] but this turns what would otherwise be harmless errors (i.e. "file not found") into a denial of service, for instance early versions of Python 3.0 would exit immediately if the command line or environment variables contained invalid UTF-8.[18]

RFC 3629 states "Implementations of the decoding algorithm MUST protect against decoding invalid sequences."[19] The Unicode Standard requires decoders to: "... treat any ill-formed code unit sequence as an error condition. This guarantees that it will neither interpret nor emit an ill-formed code unit sequence." The standard now recommends replacing each error with the replacement character "�" (U+FFFD) and continue decoding.

Some decoders consider the sequence E1,A0,20 (a truncated 3-byte code followed by a space) as a single error. This is not a good idea as a search for a space character would find the one hidden in the error. Since Unicode 6 (October 2010)[20] the standard (chapter 3) has recommended a "best practice" where the error is either one continuation byte, or ends at the first byte that is disallowed, so E1,A0,20 is a two-byte error followed by a space. This means an error is no more than three bytes long and never contains the start of a valid character, and there are 21,952 different possible errors. Technically this makes UTF-8 no longer a prefix code (you have to read one byte past some errors to figure out they are an error), but searching still works if the searched-for string does not contain any errors.

Making each byte be an error, in which case E1,A0,20 is two errors followed by a space, also still allows searching for a valid string. This means there are only 128 different errors which makes it practical to store the errors in the output string,[21] or replace them with characters from a legacy encoding.

Only a small subset of possible byte strings are error-free UTF-8: several bytes cannot appear; a byte with the high bit set cannot be alone; and in a truly random string a byte with a high bit set has only a 115 chance of starting a valid UTF-8 character. This has the (possibly unintended) consequence of making it easy to detect if a legacy text encoding is accidentally used instead of UTF-8, making conversion of a system to UTF-8 easier and avoiding the need to require a Byte Order Mark or any other metadata.

Surrogates

[edit]

Since RFC 3629 (November 2003), the high and low surrogates used by UTF-16 (U+D800 through U+DFFF) are not legal Unicode values, and their UTF-8 encodings must be treated as an invalid byte sequence.[19] These encodings all start with 0xED followed by 0xA0 or higher. This rule is often ignored as surrogates are allowed in Windows filenames and this means there must be a way to store them in a string.[22] UTF-8 that allows these surrogate halves has been (informally) called WTF-8,[23] while another variation that also encodes all non-BMP characters as two surrogates (6 bytes instead of 4) is called CESU-8.

Byte-order mark

[edit]

If the Unicode byte-order mark U+FEFF is at the start of a UTF-8 file, the first three bytes will be 0xEF, 0xBB, 0xBF.

The Unicode Standard neither requires nor recommends the use of the BOM for UTF-8, but warns that it may be encountered at the start of a file trans-coded from another encoding.[24] While ASCII text encoded using UTF-8 is backward compatible with ASCII, this is not true when Unicode Standard recommendations are ignored and a BOM is added. A BOM can confuse software that isn't prepared for it but can otherwise accept UTF-8, e.g. programming languages that permit non-ASCII bytes in string literals but not at the start of the file. Nevertheless, there was and still is software that always inserts a BOM when writing UTF-8, and refuses to correctly interpret UTF-8 unless the first character is a BOM (or the file only contains ASCII).[25]

Comparison to UTF-16

[edit]

For a long time there was considerable argument as to whether it was better to process text in UTF-16 or in UTF-8.

The primary advantage of UTF-16 is that the Windows API required it to be used to get access to all Unicode characters (only recently has this been fixed). This caused several libraries such as Qt to also use UTF-16 strings which propagates this requirement to non-Windows platforms.

In the early days of Unicode there were no characters greater than U+FFFF and combining characters were rarely used, so the 16-bit encoding was fixed-size. This made processing of text more efficient, though the gains are nowhere as great as novice programmers may imagine. All such advantages were lost as soon as UTF-16 became variable width as well.

The code points U+0800U+FFFF take 3 bytes in UTF-8 but only 2 in UTF-16. This led to the idea that text in Chinese and other languages would take more space in UTF-8. However, text is only larger if there are more of these code points than 1-byte ASCII code points, and this rarely happens in the real-world documents due to spaces, newlines, digits, punctuation, English words, and (depending on document format) markup.

UTF-8 has the advantages of being trivial to retrofit to any system that could handle an extended ASCII, not having byte-order problems, and taking about 1/2 the space for any language using mostly Latin letters.

Implementations and adoption

[edit]
Declared character set for the 10 million most popular websites since 2010
Use of the main encodings on the web from 2001 to 2012 as recorded by Google,[26] with UTF-8 overtaking all others in 2008 and over 60% of the web in 2012 (since then approaching 100%). UTF-8 is the only encoding of Unicode (explicitly) listed there, and the rest only provide subsets of Unicode. The ASCII-only figure includes all web pages that only contain ASCII characters, regardless of the declared header.

UTF-8 has been the most common encoding for the World Wide Web since 2008.[27] As of January 2025, UTF-8 is used by 98.5% of surveyed web sites.[28] Although many pages only use ASCII characters to display content, very few websites now declare their encoding to only be ASCII instead of UTF-8.[29] Virtually all countries and languages have 95% or more use of UTF-8 encodings on the web.

Many standards only support UTF-8, e.g. JSON exchange requires it (without a byte-order mark (BOM)).[30] UTF-8 is also the recommendation from the WHATWG for HTML and DOM specifications, and stating "UTF-8 encoding is the most appropriate encoding for interchange of Unicode"[4] and the Internet Mail Consortium recommends that all e‑mail programs be able to display and create mail using UTF-8.[31][32] The World Wide Web Consortium recommends UTF-8 as the default encoding in XML and HTML (and not just using UTF-8, also declaring it in metadata), "even when all characters are in the ASCII range ... Using non-UTF-8 encodings can have unexpected results".[33]

Lots of software has the ability to read/write UTF-8. It may though require the user to change options from the normal settings, or may require a BOM (byte-order mark) as the first character to read the file. Examples of software supporting UTF-8 include Microsoft Word,[34][35][36] Microsoft Excel (2016 and later),[37][38] Google Drive, LibreOffice and most databases.

Software that "defaults" to UTF-8 (meaning it writes it without the user changing settings, and it reads it without a BOM) has become more common since 2010.[39] Windows Notepad, in all currently supported versions of Windows, defaults to writing UTF-8 without a BOM (a change from Windows 7 Notepad), bringing it into line with most other text editors.[40] Some system files on Windows 11 require UTF-8[41] with no requirement for a BOM, and almost all files on macOS and Linux are required to be UTF-8 without a BOM.[citation needed] Programming languages that default to UTF-8 for I/O include Ruby 3.0,[42][43] R 4.2.2,[44] Raku and Java 18.[45] Although the current version of Python requires an option to open() to read/write UTF-8,[46] plans exist to make UTF-8 I/O the default in Python 3.15.[47] C++23 adopts UTF-8 as the only portable source code file format.[48]

Backwards compatibility is a serious impediment to changing code and APIs using UTF-16 to use UTF-8, but this is happening. As of May 2019, Microsoft added the capability for an application to set UTF-8 as the "code page" for the Windows API, removing the need to use UTF-16; and more recently has recommended programmers use UTF-8,[49] and even states "UTF-16 [...] is a unique burden that Windows places on code that targets multiple platforms".[3] The default string primitive in Go,[50] Julia, Rust, Swift (since version 5),[51] and PyPy[52] uses UTF-8 internally in all cases. Python (since version 3.3) uses UTF-8 internally for Python C API extensions[53][54] and sometimes for strings[53][55] and a future version of Python is planned to store strings as UTF-8 by default.[56][57] Modern versions of Microsoft Visual Studio use UTF-8 internally.[58] Microsoft's SQL Server 2019 added support for UTF-8, and using it results in a 35% speed increase, and "nearly 50% reduction in storage requirements."[59]

Java internally uses Modified UTF-8 (MUTF-8), in which the null character U+0000 uses the two-byte overlong encoding 0xC00x80, instead of just 0x00.[60] Modified UTF-8 strings never contain any actual null bytes but can contain all Unicode code points including U+0000,[61] which allows such strings (with a null byte appended) to be processed by traditional null-terminated string functions. Java reads and writes normal UTF-8 to files and streams,[62] but it uses Modified UTF-8 for object serialization,[63][64] for the Java Native Interface,[65] and for embedding constant strings in class files.[66] The dex format defined by Dalvik also uses the same modified UTF-8 to represent string values.[67] Tcl also uses the same modified UTF-8[68] as Java for internal representation of Unicode data, but uses strict CESU-8 for external data. All known Modified UTF-8 implementations also treat the surrogate pairs as in CESU-8.

Raku programming language (formerly Perl 6) uses utf-8 encoding by default for I/O (Perl 5 also supports it); though that choice in Raku also implies "normalization into Unicode NFC (normalization form canonical). In some cases you may want to ensure no normalization is done; for this you can use utf8-c8".[69] That UTF-8 Clean-8 variant, implemented by Raku, is an encoder/decoder that preserves bytes as is (even illegal UTF-8 sequences) and allows for Normal Form Grapheme synthetics.[70]

Version 3 of the Python programming language treats each byte of an invalid UTF-8 bytestream as an error (see also changes with new UTF-8 mode in Python 3.7[71]); this gives 128 different possible errors. Extensions have been created to allow any byte sequence that is assumed to be UTF-8 to be losslessly transformed to UTF-16 or UTF-32, by translating the 128 possible error bytes to reserved code points, and transforming those code points back to error bytes to output UTF-8. The most common approach is to translate the codes to U+DC80...U+DCFF which are low (trailing) surrogate values and thus "invalid" UTF-16, as used by Python's PEP 383 (or "surrogateescape") approach.[21] Another encoding called MirBSD OPTU-8/16 converts them to U+EF80...U+EFFF in a Private Use Area.[72] In either approach, the byte value is encoded in the low eight bits of the output code point. These encodings are needed if invalid UTF-8 is to survive translation to and then back from the UTF-16 used internally by Python, and as Unix filenames can contain invalid UTF-8 it is necessary for this to work.[73]

Standards

[edit]

The official name for the encoding is UTF-8, the spelling used in all Unicode Consortium documents. The hyphen-minus is required and no spaces are allowed. Some other names used are:

There are several current definitions of UTF-8 in various standards documents:

  • RFC 3629 / STD 63 (2003), which establishes UTF-8 as a standard internet protocol element
  • RFC 5198 defines UTF-8 NFC for Network Interchange (2008)
  • ISO/IEC 10646:2020-1 §9.1 (2020)[83]
  • The Unicode Standard, Version 16.0.0 (2024)[84]

They supersede the definitions given in the following obsolete works:

  • The Unicode Standard, Version 2.0, Appendix A (1996)
  • ISO/IEC 10646-1:1993 Amendment 2 / Annex R (1996)
  • RFC 2044 (1996)
  • RFC 2279 (1998)
  • The Unicode Standard, Version 3.0, §2.3 (2000) plus Corrigendum #1 : UTF-8 Shortest Form (2000)
  • Unicode Standard Annex #27: Unicode 3.1 (2001)[85]
  • The Unicode Standard, Version 5.0 (2006)[86]
  • The Unicode Standard, Version 6.0 (2010)[87]

They are all the same in their general mechanics, with the main differences being on issues such as allowed range of code point values and safe handling of invalid input.

See also

[edit]

References

[edit]
  1. ^ "Chapter 2. General Structure". The Unicode Standard (6.0 ed.). Mountain View, California, US: The Unicode Consortium. ISBN 978-1-936213-01-6.
  2. ^ "Conformance". The Unicode Standard (6.0 ed.). Mountain View, California, US: The Unicode Consortium. D76 Unicode scalar value. ISBN 978-1-936213-01-6. – 17 planes times 216 code points per plane, minus 211 technically-invalid surrogates
  3. ^ a b "UTF-8 support in the Microsoft GDK". Microsoft Learn. Microsoft Game Development Kit (GDK). Retrieved 2023-03-05.
  4. ^ a b "Encoding Standard". encoding.spec.whatwg.org. Retrieved 2020-04-15.
  5. ^ "File System Safe UCS — Transformation Format (FSS-UTF) - X/Open Preliminary Specification" (PDF). unicode.org.
  6. ^ "Appendix F. FSS-UTF / File System Safe UCS Transformation format" (PDF). The Unicode Standard 1.1. Archived (PDF) from the original on 2016-06-07. Retrieved 2016-06-07.
  7. ^ Whistler, Kenneth (2001-06-12). "FSS-UTF, UTF-2, UTF-8, and UTF-16". Archived from the original on 2016-06-07. Retrieved 2006-06-07.
  8. ^ a b c Pike, Rob (2003-04-30). "UTF-8 history". Retrieved 2012-09-07.
  9. ^ At that time subtraction was slower than bit logic on many computers, and speed was considered necessary for acceptance.[citation needed]
  10. ^ Pike, Rob; Thompson, Ken (1993). "Hello World or Καλημέρα κόσμε or こんにちは 世界" (PDF). Proceedings of the Winter 1993 USENIX Conference.
  11. ^ "USENIX Winter 1993 Conference Proceedings". usenix.org.
  12. ^ Alvestrand, Harald T. (January 1998). IETF Policy on Character Sets and Languages. IETF. doi:10.17487/RFC2277. BCP 18. RFC 2277.
  13. ^ Pike, Rob (2012-09-06). "UTF-8 turned 20 years old yesterday". Retrieved 2012-09-07.
  14. ^ Lunde, Ken (2022-01-09). "2022 Top Ten List: Why Support Beyond-BMP Code Points?". Medium. Retrieved 2024-01-07.
  15. ^ Marin, Marvin (2000-10-17). Windows NT UNICODE vulnerability analysis. Web server folder traversal. SANS Institute (Report). Malware FAQ. MS00-078. Archived from the original on Aug 27, 2014.
  16. ^ "CVE-2008-2938". National Vulnerability Database (nvd.nist.gov). U.S. National Institute of Standards and Technology. 2008.
  17. ^ "DataInput". docs.oracle.com. Java Platform SE 8. Retrieved 2021-03-24.
  18. ^ "Non-decodable bytes in system character interfaces". python.org. 2009-04-22. Retrieved 2014-08-13.
  19. ^ a b Yergeau, F. (November 2003). UTF-8, a transformation format of ISO 10646. IETF. doi:10.17487/RFC3629. STD 63. RFC 3629. Retrieved August 20, 2020.
  20. ^ Unicode 6.0.0. unicode.org (Report). October 2010.
  21. ^ a b von Löwis, Martin (2009-04-22). "Non-decodable Bytes in System Character Interfaces". Python Software Foundation. PEP 383.
  22. ^ "Change Windows filesystem encoding to UTF-8". Python.org. PEP 529. Retrieved 2022-05-10.
  23. ^ "The WTF-8 encoding".
  24. ^ "Chapter 2" (PDF), The Unicode Standard — Version 15.0.0, p. 39
  25. ^ "UTF-8 and Unicode FAQ for Unix/Linux".
  26. ^ Davis, Mark (2012-02-03). "Unicode over 60 percent of the web". Official Google blog. Archived from the original on 2018-08-09. Retrieved 2020-07-24.
  27. ^ Davis, Mark (2008-05-05). "Moving to Unicode 5.1". Official Google blog. Retrieved 2023-03-13.
  28. ^ "Usage Survey of Character Encodings broken down by Ranking". W3Techs. January 2025. Retrieved 2025-01-07.
  29. ^ "Usage statistics and market share of ASCII for websites". W3Techs. January 2025. Retrieved 2025-01-07.
  30. ^ Bray, Tim (December 2017). Bray, Tim (ed.). The JavaScript Object Notation (JSON) Data Interchange Format. IETF. doi:10.17487/RFC8259. RFC 8259. Retrieved 16 February 2018.
  31. ^ "Using International Characters in Internet Mail". Internet Mail Consortium. 1998-08-01. Archived from the original on 2007-10-26. Retrieved 2007-11-08.
  32. ^ "Encoding Standard". encoding.spec.whatwg.org. Retrieved 2018-11-15.
  33. ^ "Specifying the document's character encoding". HTML 5.2 (Report). World Wide Web Consortium. 14 December 2017. Retrieved 2018-06-03.
  34. ^ "Choose text encoding when you open and save files". Microsoft Support (support.microsoft.com). Retrieved 2021-11-01.
  35. ^ "UTF-8 - Character encoding of Microsoft Word DOC and DOCX files?". Stack Overflow. Retrieved 2021-11-01.
  36. ^ "Exporting a UTF-8 .txt file from Word". support.3playmedia.com. 14 March 2023.
  37. ^ "Are XLSX files UTF-8 encoded, by definition?". Stack Overflow. Excel. Retrieved 2021-11-01.
  38. ^ Abhinav, Ankit; Xu, Jazlyn (April 13, 2020). "How to open UTF-8 CSV file in Excel without mis-conversion of characters in Japanese and Chinese language for both Mac and Windows?". Microsoft Support Community. Retrieved 2021-11-01.
  39. ^ Galloway, Matt (October 2012). "Character encoding for iOS developers; or, UTF-8 what now?". www.galloway.me.uk. Retrieved 2021-01-02. ... in reality, you usually just assume UTF-8 since that is by far the most common encoding.
  40. ^ "Windows 10 Notepad is getting better UTF-8 encoding support". BleepingComputer. Retrieved 2021-03-24. Microsoft is now defaulting to saving new text files as UTF-8 without BOM, as shown below.
  41. ^ "Customize the Windows 11 Start menu". docs.microsoft.com. Retrieved 2021-06-29. Make sure your LayoutModification.json uses UTF-8 encoding.
  42. ^ "Set default for Encoding.default_external to UTF-8 on Windows". Ruby Issue Tracking System (bugs.ruby-lang.org). Ruby master. Feature #16604. Retrieved 2022-08-01.
  43. ^ "Feature #12650: Use UTF-8 encoding for ENV on Windows". Ruby Issue Tracking System (bugs.ruby-lang.org). Ruby master. Retrieved 2022-08-01.
  44. ^ "New features in R 4.2.0". R bloggers (r-bloggers.com). The Jumping Rivers Blog. 2022-04-01. Retrieved 2022-08-01.
  45. ^ "UTF-8 by default". openjdk.java.net. JEP 400. Retrieved 2022-03-30.
  46. ^ "add a new UTF-8 mode". peps.python.org. PEP 540. Retrieved 2022-09-23.
  47. ^ "Make UTF-8 mode default". peps.python.org. PEP 686. Retrieved 2023-07-26.
  48. ^ Support for UTF-8 as a portable source file encoding (PDF). open-std.org (Report). 2022. p2295r6.
  49. ^ "Use UTF-8 code pages in Windows apps". Microsoft Learn. 20 August 2024. Retrieved 2024-09-24.
  50. ^ "Source code representation". The Go Programming Language Specification. golang.org (Report). Retrieved 2021-02-10.
  51. ^ Tsai, Michael J. (21 March 2019). "UTF-8 string in Swift 5" (blog post). Retrieved 2021-03-15.
  52. ^ "PyPy v7.1 released; now uses UTF-8 internally for Unicode strings". Mattip. PyPy status blog. 2019-03-24. Retrieved 2020-11-21.
  53. ^ a b "Flexible String Representation". Python.org. PEP 393. Retrieved 2022-05-18.
  54. ^ "Common Object Structures". Python documentation. Retrieved 2024-05-29.
  55. ^ "Unicode objects and codecs". Python documentation. Retrieved 2023-08-19. UTF-8 representation is created on demand and cached in the Unicode object.
  56. ^ "PEP 623 – remove wstr from Unicode". Python.org. Retrieved 2020-11-21.
  57. ^ Wouters, Thomas (2023-07-11). "Python 3.12.0 beta 4 released". Python Insider (pythoninsider.blogspot.com) (blog post). Retrieved 2023-07-26. The deprecated wstr and wstr_length members of the C implementation of unicode objects were removed, per PEP 623.
  58. ^ "validate-charset (validate for compatible characters)". docs.microsoft.com. Retrieved 2021-07-19. Visual Studio uses UTF-8 as the internal character encoding during conversion between the source character set and the execution character set.
  59. ^ "Introducing UTF-8 support for SQL Server". techcommunity.microsoft.com. 2019-07-02. Retrieved 2021-08-24.
  60. ^ "Java SE documentation for Interface java.io.DataInput, subsection on Modified UTF-8". Oracle Corporation. 2015. Retrieved 2015-10-16.
  61. ^ "The Java Virtual Machine Specification, section 4.4.7: "The CONSTANT_Utf8_info Structure"". Oracle Corporation. 2015. Retrieved 2015-10-16.
  62. ^ InputStreamReader and OutputStreamWriter
  63. ^ "Java Object Serialization Specification, chapter 6: Object Serialization Stream Protocol, section 2: Stream Elements". Oracle Corporation. 2010. Retrieved 2015-10-16.
  64. ^ DataInput and DataOutput
  65. ^ "Java Native Interface Specification, chapter 3: JNI Types and Data Structures, section: Modified UTF-8 Strings". Oracle Corporation. 2015. Retrieved 2015-10-16.
  66. ^ "The Java Virtual Machine Specification, section 4.4.7: "The CONSTANT_Utf8_info Structure"". Oracle Corporation. 2015. Retrieved 2015-10-16.
  67. ^ "ART and Dalvik". Android Open Source Project. Archived from the original on 2013-04-26. Retrieved 2013-04-09.
  68. ^ "UTF-8 bit by bit". Tcler's Wiki. 2001-02-28. Retrieved 2022-09-03.
  69. ^ "encoding | Raku Documentation". docs.raku.org. Retrieved 2024-10-06.
  70. ^ "Unicode | Raku Documentation". docs.raku.org. Retrieved 2024-10-06.
  71. ^ "PEP 540 -- Add a new UTF-8 Mode". Python.org. Retrieved 2021-03-24.
  72. ^ "RTFM optu8to16(3), optu8to16vis(3)". www.mirbsd.org.
  73. ^ Davis, Mark; Suignard, Michel (2014). "3.7 Enabling Lossless Conversion". Unicode Security Considerations. Unicode Technical Report #36.
  74. ^ "Encoding Standard § 4.2. Names and labels". WHATWG. Retrieved 2018-04-29.
  75. ^ "Character Sets". Internet Assigned Numbers Authority. 2013-01-23. Retrieved 2013-02-08.
  76. ^ "BOM". suikawiki (in Japanese). Archived from the original on 2009-01-17.
  77. ^ Davis, Mark. "Forms of Unicode". IBM. Archived from the original on 2005-05-06. Retrieved 2013-09-18.
  78. ^ Liviu (2014-02-07). "UTF-8 codepage 65001 in Windows 7 - part I". Retrieved 2018-01-30. Previously under XP (and, unverified, but probably Vista, too) for loops simply did not work while codepage 65001 was active
  79. ^ "MySQL :: MySQL 8.0 Reference Manual :: 10.9.1 The utf8mb4 Character Set (4-Byte UTF-8 Unicode Encoding)". MySQL 8.0 Reference Manual. Oracle Corporation. Retrieved 2023-03-14.
  80. ^ "MySQL :: MySQL 8.0 Reference Manual :: 10.9.2 The utf8mb3 Character Set (3-Byte UTF-8 Unicode Encoding)". MySQL 8.0 Reference Manual. Oracle Corporation. Retrieved 2023-02-24.
  81. ^ "Database Globalization Support Guide". docs.oracle.com. Retrieved 2023-03-16.
  82. ^ "HP PCL Symbol Sets | Printer Control Language (PCL & PXL) Support Blog". 2015-02-19. Archived from the original on 2015-02-19. Retrieved 2018-01-30.
  83. ^ ISO/IEC 10646:2020 §9.1, 2020.
  84. ^ The Unicode Standard, Version 16.0 §3.9 D92, §3.10 D95, 2021.
  85. ^ Unicode Standard Annex #27: Unicode 3.1, 2001.
  86. ^ The Unicode Standard, Version 5.0 §3.9–§3.10 ch. 3, 2006.
  87. ^ The Unicode Standard, Version 6.0 §3.9 D92, §3.10 D95, 2010.
[edit]