See where a QR code really goes.
Point your camera or drop an image. The code is decoded right here in your browser — you read the full link, check it for scam signals, and copy it before deciding to open anything. Nothing is uploaded.
Grant camera access to scan a code in real time. Aim the rear camera at any QR code.
Read first. Open later — if at all.
A QR code is just a picture; you can't tell where it leads by looking. "Quishing" scams hide malicious links inside codes on parking meters, fake invoices, and flyers. This reader shows you the real destination so you can judge it before you ever tap through. Need to make a code instead? Use the QR code generator, or learn how to scan on any phone.
Local decoding
The camera feed and any image you drop are processed entirely on your device. No frames, files, or links are sent anywhere.
Link safety signals
For web links we surface red flags — no HTTPS, raw IP addresses, hidden login info, look-alike punycode domains, and shorteners that mask the true target.
Reads every format
Beyond links: Wi-Fi credentials, contact cards, email, SMS and phone codes are parsed into plain, readable fields.
Does opening this scanner visit the link automatically?
Never. The decoded link is shown as text only. You'll see a separate "Open" button that does nothing until you deliberately click it — and even then it opens in a new tab with no referrer passed along.
Why does the camera need permission, and is it safe?
Browsers require your explicit permission before any site can use the camera, and it only works over a secure (HTTPS) connection. The video never leaves your device — it's drawn to a hidden canvas, scanned for a code, and discarded frame by frame.
The camera won't start — what's wrong?
Common causes: the page isn't served over HTTPS, another app is already using the camera, or permission was denied. Check your browser's site settings to re-allow camera access, then reload. You can always use the Image / Drop mode instead.
What is "quishing"?
QR phishing: attackers print a malicious QR code over a legitimate one (or mail a fake notice) so that scanning it sends you to a credential-stealing site. Reading the link before opening it — exactly what this tool is for — is the simplest defense.