How are values typed in the output?

With inference on, clean numbers stay unquoted, true/false become TRUE/FALSE, empty cells and null become NULL, and everything else is quoted as a string. Turn it off to quote every value.

Does it handle quoted fields with commas inside?

Yes. The parser follows RFC 4180, so quoted fields, embedded commas, doubled quotes and line breaks inside quotes are all handled correctly.

Where does the table and column names come from?

You provide the table name, and the column list comes from the CSV's header row. Each data row becomes one INSERT into that table with those columns.

How are string values escaped for SQL?

Single quotes inside string values are doubled (' becomes '') so the generated SQL is valid and resistant to breaking out of the string literal.

Is my CSV uploaded anywhere?

No. The conversion runs entirely in your browser with JavaScript, so your data never leaves your device.

CSV to SQL INSERT Generator

This tool converts CSV data into SQL INSERT statements — one statement per data row — ready to run in psql, the MySQL client, SQLite or SQL Server. It is a fast way to load a spreadsheet or export into a database table without writing the INSERTs by hand or setting up an import tool.

How it works

The first row of the CSV is treated as the column names, and you supply the table name. Each following row becomes an INSERT INTO table (cols) VALUES (...) statement. An RFC 4180-aware parser handles quoted fields, embedded commas and doubled quotes. With type inference on, the tool emits appropriate SQL literals:

Cell value	SQL output
clean number (e.g. 42)	`42` (unquoted)
true / false	`TRUE` / `FALSE`
empty cell or “null”	`NULL`
anything else	`'quoted string'` (single quotes doubled)

Turn inference off to quote every value as a string.

Example

Given the CSV:

id,name,active
1,Ada,true
2,"Bao, Jr.",false

with table name users, it produces:

INSERT INTO users (id, name, active) VALUES (1, 'Ada', TRUE);
INSERT INTO users (id, name, active) VALUES (2, 'Bao, Jr.', FALSE);

Note the number stays unquoted, the booleans become TRUE/FALSE, and the comma inside “Bao, Jr.” is kept as part of the string.

Everything runs locally in your browser — nothing is uploaded, which makes it safe for confidential spreadsheets and exports.