articles/payloaddecoder.html
// Payload Decoder
QR Payload Decoder
Upload a QR code to safely inspect its contents without executing any hidden scripts or automatically opening any links.
100%Offline Decoding
0Links Auto-Opened
6+Payload Formats
0Account Required
Drag & Drop QR Image Here
or click to browse your files
Decoded Payload
Unknown TypeRaw Extracted Data String:
Why is this safe?
Standard smartphone cameras often automatically open URLs or execute actions found in QR codes. This decoder extracts the raw text completely offline on your device and prints it to the screen without executing it, allowing you to inspect vCards, WiFi passwords, and raw links safely.
// 3-Step Inspection
How to Safely Inspect a Suspicious QR Code
Take a Picture Safely
Upload the Image Here
Analyze the Raw Data
QuickQRC
Technical Brief · No. 0002
// FAQ
Frequently Asked Questions
The payload is the raw text encoded in the code. People assume it is always a website link, but it can hold a Wi-Fi network and password, a contact card, a calendar event, a payment request, an SMS, or plain text. The decoder shows you which.
Scanning with a phone camera lets the operating system act on the code, opening a link, dialing a number, or prompting to join a network. Decoding shows the raw contents first, so you can inspect a code you do not fully trust before anything happens.
Web URLs, Wi-Fi (WIFI:), vCard contacts, EPC SEPA bank transfers, SMS, mailto, geo locations, and Bitcoin or Ethereum payment URIs. Anything else, such as MECARD, calendar events, otpauth codes, or app links, still decodes and displays in full, just without a field table.
Yes. Upload the Wi-Fi code's image and the password appears masked with a Show button and a Copy button, useful for a laptop or desktop that cannot scan a code itself, or to share the password without an app.
No. The image is decoded in your browser with the jsQR library. Nothing about the image or the data it contains is sent anywhere, logged, or stored.
No. The decoder shows you the exact address so you can read the real domain, but it does not judge reputation. Use the Verify Safety in Security Scanner button, and treat an unfamiliar domain with caution.
Yes, as long as the code is reasonably sharp and large in the image. Save or screenshot the code, then drag the file into the drop zone. Very small or blurry captures may not decode.