QR Tools · Local processing
Scan QR codes from images, screenshots, clipboard, or camera locally, identify the payload type, and review destinations before acting.
Decode and inspect locally
Camera permission is requested only after you choose “Use camera.” Images and frames stay in this browser.
Safe handling: decoded destinations are displayed first. Nothing opens, connects, calls, emails, or sends automatically.
Upload, paste, or scan a QR code to identify its content and review it before acting.
The practical guide
The scanner distinguishes web links, Wi-Fi credentials, contact cards, email, phone, SMS, custom schemes, and plain text. It never opens or activates decoded content automatically.
For HTTP and HTTPS links, the result separates protocol, hostname, path, query, and fragment. It warns about unencrypted HTTP, numeric IP addresses, embedded credentials, and punycode hostnames without pretending to provide malware scanning.
Wi-Fi codes can expose a network name and password. Contact cards can contain phone numbers, email addresses, organizations, and websites. The scanner shows these fields before you copy or use them.
Upload a saved screenshot, drag an image into the chooser, paste an image from the clipboard, or start the camera explicitly. Cropping close to the QR code usually improves detection.
Camera code loads only after you choose Use camera. The stream stops when a code is found, when you press Stop camera, or when you leave the page.
Privacy by architecture
Tool inputs, settings, and outputs are processed locally and are not intentionally sent to an application server.
Questions, answered
No. Image bytes and camera frames are decoded in browser memory and are not sent to a QR service.
Blur, glare, low resolution, excessive surrounding area, damage, or low contrast can prevent reliable decoding. Try a sharper image cropped closer to the code.
Never. The scanner displays and classifies the content first. Only HTTP and HTTPS links receive an explicit Open URL action.
No. It identifies structural warning signs but does not contact a reputation service or scan the destination for malware.