QR code content inspector

Give it an image or the camera and see what the code holds, with the real website name in plain sight and warnings for shortened links, unencrypted addresses and other red flags.

  • Free
  • No sign-up
  • Runs in your browser
qr-content-inspector

100% private — the image is read in your browser and never uploaded. The camera, if you use it, is not recorded.

How it works

Show it the code

Drop an image, paste a screenshot or use the camera.

Check the website and the warnings

The real host is separated from the rest, and red flags are listed.

Decide whether to open it

Nothing opens unless you press the button.

Look before you scan and tap

A QR code is a blind link: you cannot read where it goes until you have already gone there. That is exactly what scammers exploit. They put a sticker over a genuine code on a parking meter, a charging point, a restaurant table or a poster, so that people land on a page that copies a real payment or login form. The habit that protects you is to look at where a code leads before opening it. This inspector lets you do that.

What it shows

  • The real website of a link, separated from the path, so that you can judge it by the part that counts: the last two parts of the host name.
  • Warnings for shortened links, which hide the destination; for addresses with http instead of https; for domains built with look-alike letters (xn--); for links that use a bare IP number; and for addresses with a user name or password in them.
  • The fields of other kinds of content: the Wi-Fi name and password, the details of a contact, the recipient and amount of a bank transfer, the number of a phone call.

Signs that a QR code is not what it seems

A sticker that looks like it has been placed over another, a code that asks you to pay or log in when you expected information, a link that goes to a site with a slightly different name from the business, and a page that pushes you to install an app or enter a card number in a hurry are all reasons to stop. If the address shown here does not match the business you expected, do not continue.

Ways of getting the code in

Drop or upload an image, paste a screenshot with Ctrl+V or scan with the device's camera. The image is analysed in your browser, and the camera feed is not recorded or sent. The tool tries several sizes and inverted colors to read difficult codes.

What it does not do

It does not know whether a website is malicious: it only shows you what the code says and points out the warning signs. It cannot follow a shortened link to reveal its destination without visiting it, which it will not do for you. If in doubt, do not open it and ask the person or business that gave you the code. To make your own codes, use the QR code generator.

Frequently asked questions

How can I check a QR code before opening it?
Give this tool an image of it or scan it with the camera. It shows the real website and any warning signs without opening anything.
Are QR codes dangerous?
The code itself is only data. The risk is where it leads, and criminals sometimes stick fake codes over real ones.
What is a shortened link and why is it a warning?
A service that turns a long address into a short one. It hides the real destination, so it is worth being careful.
What does xn-- in an address mean?
It marks an internationalised domain name, which can be used to imitate a known site with look-alike characters.
Does the tool open the link?
No. It only shows it. You choose whether to open it.
Is my image uploaded anywhere?
No. Everything is analysed in your browser.