QR Code Scanner
The QRJiffy QR code scanner reads a QR code from your camera, an image file or a pasted screenshot, and shows the full content with safety checks before you open anything. Nothing is uploaded: decoding happens on your device.
Drop an image here, or paste a screenshot (Ctrl+V / ⌘V).
Your result appears here.
Links are never opened automatically.
No common phishing signs found. Still check that the domain is the one you expect.
Raw content
How do you scan a QR code online?
You scan a QR code online by opening the scanner, allowing camera access or uploading an image, and reading the decoded result.
- Press Scan with camera and allow camera access when the browser asks.
- Hold the QR code 15–30 cm from the camera with all four corners in view.
- Read the result card: the scanner names the content type and shows every field.
- Check the safety notes, then open the link or copy the content.

How do you scan a QR code from an image or screenshot?
You scan a QR code from an image by uploading the file, dragging it onto the scanner, or pasting a screenshot from the clipboard.
The scanner accepts PNG, JPG, WebP, GIF and HEIC files that your browser can display. It finds the code anywhere in the picture, so a full-page screenshot works. A code that fills less than 10% of the image reads more reliably after you crop it.
How does the scanner check if a QR code is safe?
The scanner checks every decoded link against 7 common phishing signs and shows the full URL before you choose to open it.
The 7 checks are listed below with the reason each one matters.
| Check | Why it matters |
|---|---|
| http instead of https | Data sent to the page is not encrypted. |
| Raw IP address | Legitimate businesses link to a domain name, not a number. |
| Punycode domain (xn--) | Look-alike characters imitate brands such as paypal.com. |
| URL shortener | The final destination is hidden until you open it. |
| “@” in the link | Text before “@” disguises the real domain after it. |
| Deep sub-domains | paypal.com.secure-login.example.net belongs to example.net. |
| Risky file download | .apk, .exe and .zip files can install malware. |
What can this QR code reader decode?
This QR code reader decodes 12 content formats, including links, WiFi networks, contacts, events, payments and plain text.
Each format is shown as labelled fields instead of raw text:
- Website links, with domain and safety checks
- WiFi networks: name, password and security type
- Contact cards (vCard and MECARD): name, phone, email, company
- Calendar events (VEVENT): title, start, end, location
- Email, SMS and phone-call codes
- Map coordinates (geo:) and Google Maps links
- UPI and cryptocurrency payment requests
- Plain text of any length
Do you need a QR scanner app on your phone?
No. iPhones from iOS 11 and most Android phones from Android 9 scan QR codes with the built-in camera.
This web scanner covers the cases a phone camera does not: codes inside a screenshot, codes on your laptop screen, and checking a suspicious link before it opens.
QR code scanner FAQ
Can I scan a QR code from a screenshot or picture?
Yes. Upload the screenshot or photo, or paste it with Ctrl+V / ⌘V, and the scanner reads the QR code inside the image. The code must be in focus and fill at least 10% of the picture.
Can I scan a QR code on my laptop?
Yes. Open this page on any laptop with a webcam, press “Scan with camera” and hold the QR code 15–30 cm from the lens. Without a webcam, upload a photo of the code instead.
Does this QR scanner upload my images?
No. The image is decoded inside your browser, so neither the picture nor the QR code content is sent to QRJiffy or any other server.
Why will my QR code not scan?
A QR code fails to scan when it is blurry, too small, low-contrast, cropped, or missing its blank border (quiet zone). Move closer, add light, and make sure all four edges of the code are visible.
Is it safe to scan any QR code?
No. A QR code can link to a phishing site, so check the full link before opening it. This scanner shows the complete URL and flags shorteners, raw IP addresses, look-alike domains and unencrypted links.