Why decode a QR code before scanning it?

QR codes are opaque — you cannot tell where they link until you scan them. Malicious QR codes (quishing attacks) can redirect to phishing sites or trigger unintended actions. Decoding the QR code first lets you inspect the URL safely.

Is my image uploaded to a server?

No. The QR code is decoded entirely in your browser using the Canvas API and BarcodeDetector. Nothing is transmitted anywhere.

What if my browser does not support BarcodeDetector?

BarcodeDetector is available in Chrome 83+, Edge 83+, and Safari 17+. Firefox does not support it natively. If detection fails, the tool will show a compatibility notice.

What types of QR code content are supported?

URLs, plain text, WiFi credentials, vCard contact data, and any other data that can be encoded in a QR code. The tool displays the raw decoded content.

What are tracking parameters in QR code URLs?

Marketers embed utm_* and other tracking parameters in QR code URLs to measure scan rates and demographics. Once decoded, you can inspect and clean the URL using the URL Tracker Cleaner tool.

Can I decode QR codes from screenshots?

Yes. Take a screenshot of the QR code and upload or drag the image file. The tool reads any image format your browser supports (JPEG, PNG, WebP, AVIF).

Quishing (QR phishing) is a social engineering attack where attackers replace legitimate QR codes — on posters, menus, or parking meters — with malicious ones that redirect to credential-harvesting pages. Always decode unknown QR codes before scanning.

Can I use my camera to decode a QR code?

You can take a photo with your camera and upload the image. Live camera scanning is not currently supported in this tool.

Privacy Tools /

QR code decoder

Upload or drag an image containing a QR code to reveal the encoded URL or text — inspect before you scan.

100% in your browser. Images are never uploaded anywhere.

Drag & drop a QR code image here

Choose image

How to use

Drag a QR code image onto the upload area, or click Choose image to select a file.
The tool decodes the QR code and displays the embedded content.
If the content is a URL, inspect it for tracking parameters.
Use the URL Tracker Cleaner to strip any utm_* or fbclid parameters before visiting.

Common use cases

Quishing protection — inspect unknown QR codes on posters or menus before scanning.
Marketing audit — decode QR codes in campaigns to verify the embedded URL.
Tracking analysis — reveal utm_* parameters embedded in QR code links.

Also see: URL Tracker Cleaner to strip tracking params from decoded URLs, and QR Code Generator to create your own tracking-free QR codes.

よくある質問

Why decode a QR code before scanning it?: QR codes are opaque — you cannot tell where they link until you scan them. Malicious QR codes (quishing attacks) can redirect to phishing sites or trigger unintended actions. Decoding the QR code first lets you inspect the URL safely.
Is my image uploaded to a server?: No. The QR code is decoded entirely in your browser using the Canvas API and BarcodeDetector. Nothing is transmitted anywhere.
What if my browser does not support BarcodeDetector?: BarcodeDetector is available in Chrome 83+, Edge 83+, and Safari 17+. Firefox does not support it natively. If detection fails, the tool will show a compatibility notice.
What types of QR code content are supported?: URLs, plain text, WiFi credentials, vCard contact data, and any other data that can be encoded in a QR code. The tool displays the raw decoded content.
What are tracking parameters in QR code URLs?: Marketers embed utm_* and other tracking parameters in QR code URLs to measure scan rates and demographics. Once decoded, you can inspect and clean the URL using the URL Tracker Cleaner tool.
Can I decode QR codes from screenshots?: Yes. Take a screenshot of the QR code and upload or drag the image file. The tool reads any image format your browser supports (JPEG, PNG, WebP, AVIF).
What is quishing?: Quishing (QR phishing) is a social engineering attack where attackers replace legitimate QR codes — on posters, menus, or parking meters — with malicious ones that redirect to credential-harvesting pages. Always decode unknown QR codes before scanning.
Can I use my camera to decode a QR code?: You can take a photo with your camera and upload the image. Live camera scanning is not currently supported in this tool.

このツールの問題を報告