Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Select a QR code image or use your camera to scan.
See the decoded text, URL, or data from the QR code.
Copy the decoded data or open the URL directly.
A QR code is a grid of black and white modules that stores a URL, wifi credentials, a payment address, or any text up to about 3,000 bytes. This tool reads that grid from an uploaded image or a live camera feed and returns the exact string inside it. Everything runs in the browser: your photo and your camera frames never leave the device. The thing most users get wrong is trust - decoding succeeds on a malicious code as easily as a benign one. The result is a string to judge, not a voucher of safety.
A concrete input and expected output from the current implementation.
Input
A well-lit photo of a printed QR code that encodes the URL https://example.com/promo
Expected output
https://example.com/promo
A QR code stores its payload as raw bytes, so a correct decode returns exactly the string that was encoded. The reader extracts and reports that string verbatim; it does not follow the link, resolve shortened URLs, or judge the destination, which is why checking a code's content first is meaningful.
All decoding happens locally in the browser. The reader locates the three corner finder squares every QR code carries, maps the module grid onto it, then applies the format's Reed-Solomon error correction, which can repair damaged modules depending on the code's correction level (7% to 30% of data). Finally it extracts the payload and renders it as text using the mode the code was encoded in: numeric, alphanumeric, or byte.
The first time you use camera mode, the browser asks for camera permission; until you grant it, nothing captures. Frames are then read on your device and are not uploaded. Point the code flat at the lens, keep it fully in frame, and avoid glare; the reader reports the payload when it can read the code consistently. Revoke camera permission in the browser settings when you are done.
Both. Upload any image file - a screenshot, a photo of a label, an attachment - and it decodes locally in the browser. Screenshots work well when the code is captured at full size; photos work best flat, well lit, and free of glare. Camera mode is there for live codes in the physical world.
Scanning is safe: decoding runs entirely in the browser and nothing is uploaded. The risk sits after the scan. If the code contains a URL, opening it is a separate decision, and QR codes are a known phishing channel. Verify the destination before visiting it, just as you would a link in an unexpected email.
The example and behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.
Encrypt and decrypt text using AES-256, RSA, or other ciphers with password-based key derivation.