☢ QR HAZMAT
Containment Protocol Active
☢ Containment Report
📋 Specimen Log
🧪 No specimens collected yet.
Scan a QR code to begin cataloging.
☢ About QR Hazmat
QR Hazmat is a sealed laboratory for QR codes and barcodes. It safely decodes what's inside without ever acting on the payload.
Think of it as a bomb disposal unit for those mysterious QR codes you find on stickers, posters, and suspicious emails. We open the package in a controlled environment so you don't have to.
🛡 Containment Guarantees
- We NEVER follow links or connect to URLs
- We NEVER execute any code found in scanned items
- We NEVER send your scan data anywhere
- All processing happens entirely on your device
🔎 What we detect
Our threat analysis engine checks for URL shorteners, IP-address URLs, unencrypted HTTP links, JavaScript injection, data URIs, punycode/homograph domains, suspicious TLDs, embedded credentials, excessive subdomains, phishing keywords, hidden characters, deceptive file extensions, and many other attack patterns.
⚠ Important Disclaimer
Only you can decide if a QR code is safe. We flag known risk patterns, but we cannot guarantee that any code is harmless. A "no known threats" result does not mean "safe" — it means we didn't find anything obviously suspicious.
Before acting on any scanned content, ask yourself: Do I recognize this URL? Does the domain look right, or has it been subtly altered to mimic a real site? Is there any reason someone would put this QR code here? When in doubt, don't click it.
🧪 Why "Hazmat"?
Because scanning unknown QR codes is the digital equivalent of sniffing an unmarked container. We provide the protective gear.
💡 Tips & Troubleshooting
📷 Live Scan vs. Upload
Live Scan opens your camera and continuously scans for codes in real time. Just point and it detects automatically — no need to take a photo first. It's faster and works better on curved surfaces like bottles or packaging, because it tries many frames per second.
Upload Image analyzes a single photo from your library or camera. Use this when you have a screenshot, a saved image, or when Live Scan isn't available.
⚠ Camera not working?
If the camera fails to start, your browser may be blocking access. To fix this:
- iPhone Safari: Go to Settings → Safari → Camera → set to "Allow" or "Ask"
- iPhone Chrome: Go to Settings → Chrome → Camera → enable
- Android Chrome: Tap the lock icon in the address bar → Permissions → Camera → Allow
The camera also requires a secure connection (HTTPS). If you see a "not secure" warning in your address bar, Live Scan won't be available.
🏠 Add to Home Screen
You can install QR Hazmat as a standalone app on your phone. It will get its own icon, launch without the browser toolbar, and work offline.
- iPhone: Tap the Share button (square with arrow) → "Add to Home Screen"
- Android: Tap the menu (three dots) → "Add to Home Screen" or "Install app"
Note: The Home Screen version has its own separate scan history. It won't share history with the browser version.
📋 Scan tips
- Hold the camera steady and close to the code
- Make sure the code is well-lit and in focus
- For small or distant codes, use Upload and crop the photo first
- 1D barcodes (like on groceries) work best when held flat and straight
♥ Support the Containment Effort
Running a hazmat lab isn't cheap. Well, actually it is — this is a free web app. But the developer still enjoys coffee.
This is the ONE link we vouch for. Yes, we appreciate the irony of an anti-link app asking you to click a link.
Donations are entirely optional and deeply appreciated. The app will always remain free.
⚖ Licenses
html5-qrcode
Author: Minhaz (mebjas)
License: Apache License 2.0
Source: github.com/mebjas/html5-qrcode
jsQR
Author: Cosmo Wolfe
License: Apache License 2.0
Source: github.com/cozmo/jsQR
QR Hazmat
© 2026 QR Hazmat. All rights reserved.