Is scanning a QR code from an image safer?

Yes, meaningfully. You see the destination as text instead of your phone opening it immediately, which is the whole basis of QR phishing attacks.

Why can a QR code still scan with a logo on it?

Reed-Solomon error correction. At the highest level, 30% of the modules can be unreadable and the payload still reconstructs perfectly.

How much data fits in a QR code?

Up to about 4 296 alphanumeric characters at the largest version and lowest error correction — though anything near that limit produces a dense code that phone cameras struggle to read.

Are uploaded images sent to a server?

No. Decoding happens entirely in your browser; the image never leaves your device.

QR Code Decoder

Scan QR and matrix codes from an uploaded image and read the payload.

on the roadmapImage, Media & Steganographyfree · no sign-up

This bench is being wired up

The qr-code-decoder decoder is on the roadmap. The heavier binary and cryptographic parsers ship after the core text and token decoders — all of which are already live and working.

Browse the live decoders

Input is processed on your device. Nothing you paste is sent anywhere.

What is the QR Code Decoder?

A QR code decoder reads the black-and-white module pattern of a QR code image, applies Reed-Solomon error correction and returns the encoded payload — a URL, text, Wi-Fi credential or contact record.

A QR code is a two-dimensional barcode with finder patterns in three corners for orientation, timing patterns for grid alignment, format information describing the mask and error-correction level, and the data itself spread across the remaining modules. Reed-Solomon coding means a code still scans with up to 30% of its area damaged or obscured — which is why logos can sit in the middle.

Decoding from an image rather than pointing a phone at it has a real safety advantage. QR phishing ('quishing') works precisely because a scan usually opens the link immediately; here you read the destination as text first and decide afterwards. That matters for codes on parking meters, invoices and posters, all common targets for sticker overlays.

Payloads follow simple conventions: a bare URL, WIFI:T:WPA;S:name;P:password;; for network credentials, BEGIN:VCARD for contacts, and plain text for everything else.

QR Code Decoder at a glance

Standard: ISO/IEC 18004
Max capacity: ≈4 296 alphanumeric or 2 953 binary characters
Error correction: L 7% · M 15% · Q 25% · H 30%
Payload types: URL, text, Wi-Fi, vCard, geo, email

How to use the QR Code Decoder

1Upload or drop an image containing the QR code — a photo or screenshot both work.
2Read the decoded payload as text before deciding whether to act on it.
3Check any URL's domain carefully; use the Punycode decoder if it looks unusual.

When you would reach for it

Checking where a QR code on a poster, invoice or parking meter actually leads.
Reading a Wi-Fi QR code to recover a network password as text.
Extracting a payload from a screenshot when you have no second device to scan with.

QR Code Decoder — frequently asked questions

Last reviewed 25 July 2026 · questions or corrections: contact@decoder.tools