QR Code Scanner

Scan a QR code with your camera or decode it from an image or screenshot. See links, Wi-Fi credentials and contacts safely — nothing leaves your browser.

Press Start camera and point it at a QR code. Video stays on your device.

Frequently Asked Questions

How do I scan a QR code online without an app?

Open this page, choose Camera and allow camera access, then point your phone or webcam at the code. You can also upload or paste a screenshot that contains a QR code and it is decoded instantly in the browser.

Can I scan a QR code from an image or screenshot?

Yes. Switch to the Image tab and drop a PNG, JPEG, GIF or WebP file, or press Ctrl+V / Cmd+V to paste a screenshot. The scanner tries several sizes of the image, so small or very large codes are still found.

How do I see the Wi-Fi password stored in a QR code?

Scan the Wi-Fi QR code and the tool reads the WIFI: payload, showing the network name (SSID), the security type and the password. The password is hidden by default; press Show to reveal it and Copy to paste it into your device.

Why won't my camera start?

Browsers only allow camera access on secure (HTTPS) pages and after you grant permission. If you blocked the camera earlier, re-enable it from the lock icon in the address bar, and close other apps that may be using the camera.

Is it safe to open links from a QR code?

Not always. Malicious QR codes ("quishing") lead to fake login or payment pages. This scanner never opens links automatically: it shows the full URL so you can check the domain first, and only offers an Open button for http and https links.

Are my camera images or scanned data sent to your servers?

No. Camera frames and images are decoded locally with the jsQR library in your browser. Nothing is uploaded, recorded or stored, and the camera is switched off as soon as a code is found or you leave the tab.

How a QR Code Stores Data

A QR code is a grid of black and white modules. The three large squares in the corners are finder patterns that let a scanner locate the code and work out its rotation and perspective, even when it is photographed at an angle. Between them sit timing patterns, format information and the data itself, encoded in one of four modes: numeric, alphanumeric, byte (usually UTF-8 text) or Kanji. Sizes range from version 1 (21×21 modules) to version 40 (177×177), which can hold up to about 3 KB of binary data.

Every QR code also carries Reed–Solomon error correction at level L, M, Q or H, recovering roughly 7%, 15%, 25% or 30% of damaged modules. That is why a code with a logo in the middle or a scratched sticker still scans. A QR code contains only text: a URL, a Wi-Fi string or a contact card is simply text in an agreed format, and it is the scanning app that decides what to do with it.

Staying Safe from QR Phishing ("Quishing")

Because people cannot read a QR code with their eyes, attackers use them to hide malicious links — a technique called quishing. Fake stickers are pasted over parking-meter codes, emails ask you to "re-authenticate" by scanning a code, and parcel notices lead to card-payment forms. A few habits block most of these attacks:

  • Read the domain before opening. paypa1-secure.co is not PayPal. This scanner always shows the full URL and never opens it automatically.
  • Check physical codes for stickers placed on top of the original, especially on parking meters, EV chargers and restaurant tables.
  • Distrust urgency. A QR code in an email asking you to log in or pay a fine is a classic phishing pattern.
  • Never enter passwords or card details on a page reached from a QR code unless you typed or verified the address yourself.
  • Avoid non-web schemes. Only http and https links get an Open button here; javascript: or data: payloads are shown as text only.

The Wi-Fi QR Code Format

Wi-Fi QR codes follow a simple convention introduced by the ZXing project and now supported natively by iOS and Android:

WIFI:T:WPA;S:MyNetwork;P:secret-pass;H:false;;

T is the security type (WPA, WEP, SAE or nopass), S the network name, P the password and H whether the network is hidden. Special characters such as ;, , and : are escaped with a backslash. The scanner unescapes them and shows each field separately so you can copy the password into a laptop that cannot scan codes itself.

Other Payload Types

  • vCard / MECARD — contact cards starting with BEGIN:VCARD or MECARD:.
  • Email — mailto: links, optionally with subject and body.
  • Phone and SMS — tel:, sms: or SMSTO: payloads.
  • Location — geo:lat,lng coordinates.

Related Tools