How to use it
- Choose image upload or explicitly start the camera.
- Review decoded text, scheme and domain.
- Open only trusted HTTP or HTTPS URLs after your own check.
Marketing & Digital · Local-first · Beta
Decode a QR or barcode from a user-selected image or camera when the browser supports it, then review the content safely.
The page shell is ready; the interaction area is loading.
Trust record
Browse Marketing & Digital · Methodology · Sources
A quick guide
The answer is only useful when you know what it includes and what it leaves out.
Decoded content → scheme classification → user-reviewed action
Scanning is not verification. Payment, credential-like and unknown schemes remain non-openable.
Make it concrete
A javascript: payload is classified as unsafe and remains text-only.
Boundaries
Last reviewed 10 August 2026 · Formula version 1.0
Method & sources
The formula is deterministic and runs in your browser. Read the reference below for the method used by this tool.
KarobarKit controlled methodology · authoritative reference · Checked 10 August 2026
Supports: payload escaping · file limits · safe decoded-content handling · local-only boundary
DENSO WAVE · authoritative reference · Checked 8 August 2026
Questions
No. HTTP and HTTPS destinations receive an optional action only after the decoded value is shown.
Keep going
A related local-first tool for the next step.
Found something that looks wrong? Tell us which tool and version you used.
Source register checked 10 August 2026.
Permission-first scanner
Upload an image
The image is decoded locally and released after use.
Camera permission is requested only when you press Start camera. Unknown and payment schemes stay text-only.