QR Code Scanner
Decode any QR code from a photo you upload or your live camera — no app install. Everything is processed locally in your browser.
By Alex van den Berg · Last reviewed · How we test our tools
Click to choose an image, or drag and drop
JPG, PNG, or WebP — processed locally, never uploaded
Grant camera access to scan a QR code live.
What a QR code can contain
Website URL
Detected automatically — a button lets you open the link directly.
Email address
Codes starting with mailto: open your mail app pre-filled.
Phone number
Codes starting with tel: offer a tap-to-call action.
Plain text
Wi-Fi configs, event details, or any short message — shown as-is with a copy button.
How this scanner works
This tool uses a pure-JavaScript QR decoding library that runs the same locating, sampling, and Reed–Solomon error-correction algorithm a dedicated scanner app uses — just inside your browser tab. For an uploaded photo, the image is drawn to an invisible canvas and its pixel data is analysed directly. For live camera scanning, video frames are sampled roughly 10 times per second and each frame is analysed the same way until a code is found.
Because decoding happens client-side, this works offline once the page has loaded, and no image or video data is ever transmitted anywhere — a meaningful difference from scanner apps that phone home with analytics or ad SDKs.
Scanned a code — now what? A quick safety check
Decoding a QR code is completely safe — it just reveals the text or link hidden inside. The risk starts if you act on a malicious destination without checking it. Before tapping "Open link":
- Read the full URL shown in the result box — watch for lookalike domains (e.g. "paypa1.com" instead of "paypal.com").
- Be suspicious of stickers pasted over the original code on parking meters, menus, or posters — a classic "quishing" (QR phishing) tactic.
- Never enter passwords or card details on a page reached via a public QR code without verifying the address bar matches the organisation you expect.
- Unexpected file downloads triggered by a QR link are a red flag — close the tab rather than opening the file.
Frequently Asked Questions
Does this scanner upload my photos or camera feed anywhere?
No. Both the uploaded image and the live camera feed are decoded entirely inside your browser using JavaScript. Nothing is uploaded to a server, and the camera stream is never recorded or transmitted.
Why won't my camera scan the code?
Make sure the code fills a reasonable portion of the frame, isn't blurred by camera shake, and has even lighting without strong glare. Very small, distant, or heavily damaged codes may scan more reliably using the "upload a photo" option instead, since a still photo can be taken closer and steadier.
What formats can the decoded result be?
A QR code can encode a URL, plain text, an email (mailto:), a phone number (tel:), an SMS, or a Wi-Fi network config. This scanner detects the type from the decoded string and offers a matching action — open the link, launch the mail app, dial the number, or just copy the text.
Is it safe to scan a QR code found in public?
Scanning itself is safe — it only reveals text. Acting on it is where care matters: read the decoded URL carefully before opening it, watch for lookalike domains, and never enter passwords or payment details on a page reached from a public sticker-based QR code without verifying the address bar first. See the safety section above for the full checklist.
Why does this need camera permission?
The live-scan mode needs camera access to read frames from your video feed, exactly like any barcode scanner app. Your browser will ask for explicit permission before the camera activates, and video frames are processed locally in memory — none are saved to disk or sent anywhere.