Auditing Suspected 'Quishing' (QR Phishing) Emails
Safely decode QR codes embedded in suspicious emails or parking-meter stickers to inspect the raw URL and check for masked shorteners without visiting the link.
QR Code Decoder
Inspect, decode, and forensically analyze any QR code image or screenshot. Reveal hidden link shorteners, check for unencrypted HTTP connections or suspicious executable files, extract structured WiFi and vCard data, and export comprehensive JSON forensic reports.
Select QR Code Image or Screenshot
Upload an image, drag & drop, or press Ctrl+V to paste from clipboard.
Drag and drop images here
JPG, PNG, WebP or GIF
How to Use the QR Code Decoder
- 1
Upload a QR code photo or screenshot, drag & drop an image, or press Ctrl+V to paste from your clipboard.
- 2
Our client-side engine locates the finder patterns and decodes the embedded data matrix instantly.
- 3
Review the raw payload, structured data breakdown, character counts, and protocol identification.
- 4
Inspect the automated Security & Threat Audit to verify safety before clicking unknown links.
Practical Use Cases
Debugging Generated QR Payloads
Verify exact UTF-8 byte lengths, UPI deep-link query parameters, vCard 3.0 line breaks, and WiFi escaping during app testing.
Pre-Press Verification Before Mass Printing
Confirm that artwork QR codes decode cleanly and point to the exact intended HTTPS production URL before sending 10,000 boxes to press.
QR Code Decoder Features
Forensic security & threat audit
Automatically detects masked link shorteners (bit.ly, tinyurl), unencrypted HTTP links, and suspicious executable file extensions.
Universal protocol parser
Intelligently parses URLs, WiFi network credentials, vCard digital business cards, WhatsApp chats, email mailto, and geolocation coordinates.
Clipboard paste support (Ctrl+V)
Copy a QR code screenshot from any web page or document and paste directly into the browser to decode in milliseconds.
Technical matrix metadata
Inspects character count, encoded byte size, matrix dimensions, and data density properties.
Exportable audit reports
Download a structured .json diagnostic report containing complete payload and security evaluation details.
Runs 100% in your browser
Nothing is uploaded to a remote server, so your data and files stay strictly on your device.
Free and unlimited
No account registration, no watermarks, and no daily usage caps.
Mobile and desktop ready
Responsive layouts and comfortable touch controls that fit phones, tablets, and desktops.
Technical Specifications & Best Practices
- ✓Flags shortened URLs (bit.ly, tinyurl, t.co), non-HTTPS plain-text links, IP-address hosts, and direct executable downloads (.apk, .exe, .dmg).
- ✓Supports direct Ctrl+V / Cmd+V clipboard image pasting for rapid security triage.
- ✓Exports a structured JSON diagnostic report for incident documentation or QA logs.
- ✓100% client-side execution — suspicious QR images are analyzed safely in local memory without triggering network requests.