Toolza guides / utilities

Read a QR Code and Check Its Destination

Inspect the complete decoded destination before deciding whether a QR link should be opened.

Open the tool ↓

Treat a decoded address as untrusted input

A readable QR code proves that a pattern can be decoded, not that its destination is safe. The printed label beside a code may not match the encoded text. Inspect the actual domain and path before opening it, especially when a code appears on a payment request, login page or public poster.

QR Code Scanner

Processed on your device. Your files never leave your browser.

Open the scanner for image selection or camera permissions and a focused destination check.

Open QR Code Scanner →

Start with an image you control

Use the image mode to choose a clear PNG or JPEG containing one QR symbol. A downloaded code from QR Code Generator makes a useful test fixture. Check that the decoded text matches the exact address you entered, including path and query parameters.

  1. Upload a clear screenshot or photo with the whole symbol visible.
  2. Read the displayed text rather than immediately opening its link.
  3. Confirm the expected domain and destination path.
  4. Copy the text only if it is appropriate to use elsewhere.

Use the camera deliberately

Camera mode needs browser support, a secure context and permission. Point it at a well-lit symbol, hold still, and leave the surrounding blank margin visible. The implementation stops the camera after a successful decode and when switching modes or leaving the scanner.

If permission is denied or the camera cannot start, use the image workflow instead. A desktop browser may choose a different available camera from the one you expect; this interface does not provide a full camera-management console.

Troubleshoot a failed scan

Move closer without cutting off the symbol, improve focus and lighting, and avoid glare. A tiny image, blurred resize or clipped quiet zone can prevent detection. The scanner looks for QR codes; it is not a universal reader for every barcode format or a bulk archive processor.

The image workflow renders the selected image to a browser canvas. SVG, unusual codecs or a very large photograph may have different browser support or memory needs. Try a clear ordinary raster export and one code at a time.

Keep decoding separate from visiting

The decoded payload may be plain text rather than a website URL. The scanner does not decrypt arbitrary payloads, verify website ownership, or check that a login page belongs to the claimed organisation. The image/camera decoding itself runs locally; opening a decoded link makes a separate network request to that destination. Use the generator guide’s final-layout testing steps when you are checking a code you plan to distribute.