QR Code Decoder
Read any QR code from an image or screenshot. Get the URL, Wi-Fi login, contact, or 2FA authenticator secret behind it. Free, private, and runs entirely in your browser.
Drop a QR code image, click to browse, or paste
PNG, JPEG, WebP, GIF, or BMP — decoded on your device
Decoding happens entirely in your browser. Nothing you upload — including any 2FA secret — is sent to a server, stored, or logged.
What This Decoder Reads
🔗 URLs & plain text
See exactly where a QR code points before you visit it, or pull out any text it encodes.
🔐 Authenticator / 2FA codes
Extract the otpauth secret from a two-factor setup QR so you can save it in a password manager or a second authenticator app.
📶 Wi-Fi networks
Recover the network name and password from a Wi-Fi QR code without connecting first.
👤 Contacts & more
vCard contacts, email, phone, SMS, calendar events, and geo locations are all recognized and labeled automatically.
How It Works
Add the image
Drop a QR code image, click to browse, or paste a screenshot with Ctrl/Cmd+V.
Decode locally
Your browser reads the code and identifies what type of data it holds.
Copy the result
Grab the decoded value with one click - a URL, a password, or a 2FA secret.
Is It Safe to Decode a 2FA QR Code?
Decoding a two-factor authentication QR code is safe when the decoding happens on your own device and the result is never transmitted - which is exactly how this tool works. The image and the secret it contains stay in your browser. The risk is not decoding itself; it is what happens to the secret afterward. A 2FA QR code contains a permanent seed (the otpauth:// secret) that generates your login codes, so it deserves the same care as a password. Below is how to handle it safely.
✅ Decode locally, never on a server
Only use a tool that decodes in the browser. If a site uploads your QR image to a backend to "read" it, the operator can keep your 2FA secret and generate your codes indefinitely. This tool never uploads anything - you can confirm it by decoding with your network disconnected.
✅ Paste only into trusted apps
Move the extracted secret straight into a reputable password manager or authenticator (1Password, Bitwarden, Authy, and similar). Do not email it, message it, or store it in plain text notes.
✅ Clear your clipboard afterward
After pasting the secret where it belongs, copy something harmless to overwrite the clipboard, and close the tab so nothing lingers on screen.
✅ Keep a secure backup, not a public one
Saving the secret in an encrypted vault is a good way to avoid being locked out if you lose a device. Saving it in a screenshot in your camera roll or a shared drive is not.
🔒 100% Private - Nothing Is Uploaded
QR codes often contain sensitive data - Wi-Fi passwords, contact details, or two-factor authentication secrets. That is exactly why this tool does all decoding in your browser with the jsQR library. Your image and everything decoded from it never leave your device, are never stored, and are never logged. If you are extracting a 2FA secret, treat it like a password: only paste it into trusted apps and never hand it to a site that decodes on a server.
Frequently Asked Questions
How do I decode a QR code from an image?
Drag your QR code image into the decoder above, click to browse for a file, or paste a screenshot directly (Ctrl/Cmd+V). The tool reads the code in your browser and shows the decoded content instantly. It works with photos and screenshots of QR codes in PNG, JPEG, WebP, GIF, or BMP format.
Is my image or data uploaded to a server?
No. All decoding happens locally in your browser using the HTML5 Canvas API and the jsQR library. The image never leaves your device, and nothing is stored, logged, or sent anywhere. This is important because QR codes sometimes contain sensitive data such as Wi-Fi passwords or two-factor authentication secrets.
Can it read the secret from an authenticator (2FA) QR code?
Yes. When you set up two-factor authentication, the QR code is an otpauth:// link that contains a base32 secret key. This tool recognizes those codes and shows the secret, issuer, account, and algorithm, plus a live 6-digit code so you can confirm it works. You can then paste the secret into a password manager like 1Password or another authenticator app. Because the secret is as sensitive as a password, the decoding stays entirely on your device.
Why would I want to decode a 2FA QR code instead of scanning it?
Scanning with a phone camera adds the account to that one app. Decoding the secret to text lets you save it in a password manager, back it up securely, or add the same account to more than one authenticator so you are not locked out if you lose a device. Always keep the extracted secret somewhere safe and private.
What kinds of QR codes can it read?
Any standard QR code. The tool automatically recognizes common formats and labels them: website URLs, Wi-Fi network credentials, email addresses, phone numbers, SMS messages, geo locations, contact cards (vCard), calendar events, and authenticator/2FA (otpauth) codes. Anything else is shown as plain text.
The QR code in my screenshot is small. Will it still work?
Usually yes. The decoder automatically tries the image at a few different scales, so small screenshots and dense codes (like authenticator setup codes) still read. If it fails, crop the image tighter around just the QR code, or use a higher-resolution capture, and try again.
Do I need to install an app or create an account?
No. It runs in any modern browser on desktop or mobile with no signup, no install, and no usage limit. It is completely free.
Is it safe to decode a 2FA QR code here?
The decoding itself is safe because it happens on your device and nothing is transmitted. That said, treat the extracted secret like a password: only paste it into trusted apps, do not share it, and clear it from your clipboard when done. Never upload a 2FA QR code to a random website that processes it on a server, since that would hand your secret to whoever runs the site.