Free tool · runs in your browser
Check a QR code before you print or scan it.
Spots unsafe destinations and scannability problems. Your image never leaves your device.
Drop a QR image here
Drag and drop your QR code image here, or browse files
PNG, JPG or GIF up to 10 MB
REPORT · EXAMPLE
1 WARNING→ https://[decoded-destination].com/menu
THREAT & REDIRECT
SCANNABILITY
Tip: Leave a quiet zone of at least four modules around the code so phones can find its edges.
What the validator checks
Threats and redirects
Flags look-alike domains, shorteners that hide the real destination, and phishing keywords in the link. Also checks that the link uses HTTPS.
- Suspicious URL patterns
- HTTPS check
- Hidden shortener links
Scannability & resolution
Measures contrast, resolution, and the blank margin around the code, so your print run scans on new phones and old ones.
- Contrast ratio
- Resolution check
- Quiet zone margin
A report you can act on
Results come back in seconds, with no account. Each problem comes with a plain fix so the code scans more reliably.
- Runs in your browser
- Live progress on each check
- Design fixes you can apply
Who uses it
Business owners
Check QR images before you print a big run of flyers, packaging, or product labels.
Security teams
Inspect suspicious QR codes, digital or printed, for hidden redirects, typosquatted domains, or malware.
Digital marketers
Fix spacing and test quiet zones so more phones read your code on the first try.
Everyday consumers
Check a code on a poster or in your mail before you open it on your phone.
Security advisory
QR code phishing (quishing): how to verify and scan QR codes safely
QR codes are everywhere, but so are QR scammers. Learn how to verify destinations, spot malicious stickers, and keep phishing codes off your phone.
Read security guide →Validator FAQ
Is my image uploaded anywhere?
No. Decoding and analysis happen in your browser; the image stays on your device.
What threats does it catch?
Unencrypted HTTP, known phishing and look-alike domains (like g00gle.com), subdomain abuse, non-standard ports and hidden redirects.
Does it work with other generators?
Yes. Any standard QR code from any tool works.
How does the QR code validator work?
Upload any QR code image and the validator checks it for security threats, image problems, and whether it scans. It looks for suspicious URL patterns, checks for HTTPS, measures image quality, and tells you what to fix.
Is the QR code validator really free?
Yes. It's free, there's no sign-up, and you can check as many QR codes as you like.
What image formats are supported?
PNG, JPG, JPEG and GIF all work. Images must be under 10MB.
How accurate is the security analysis?
The check uses pattern matching to spot common phishing signs. No automated check catches everything, so be careful with unfamiliar QR codes and look at the destination yourself before you open it.