# I Don’t Trust QR Codes. How Can I Manually Preview Them?

**URL:** <https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610>\
**Category:** Factual Questions\
**Created:** [May 20, 2025, 11:06pm UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610 "2025-05-20T23:06:08Z")\
**Posts on this page:** 9\
**Page:** 2

<div class="post-metadata">

**Author:** ![Reply](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/reply/32/15952_2.png) [@Reply](https://boards.straightdope.com/u/Reply)\
**Post date:** [May 21, 2025, 4:10pm UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610/21 "2025-05-21T16:10:39Z")

</div>

> [@bump](#):
>
> It _ **IS** _ a URL.

Sorry to be pedantic, but since we’re talking about trust, QR codes don’t _have_ to be URLs. They can encode arbitrary data, including URLs but also vCards, wifi invites, phone numbers to call, and sometimes malware, as above.

You can’t be certain before scanning that a QR code is showing a URL. Even if they write the URL below the QR code, there’s no guarantee the QR code actually matches that (and often it won’t, since they’ll likely point to a tracking URL instead).

It is very different from a simple URL. To your phone, scanning a code is more like getting an email or receiving a text. It has to decode it first (which can itself be a buggy process) and then it has to parse the data in it (another potential vulnerability) and then choose which app to handle it with (another potential vulnerability) and then if the app opens it, the app itself then has to parse and process that payload (another vulnerability).

It’s not a great risk, usually, but if in doubt, just ask somebody for the URL and manually type it in instead.

---

<div class="post-metadata">

**Author:** ![phs3](https://avatars.discourse-cdn.com/v4/letter/p/8491ac/32.png) [@phs3](https://boards.straightdope.com/u/phs3)\
**Post date:** [May 21, 2025, 10:46pm UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610/22 "2025-05-21T22:46:06Z")

</div>

I didn’t see the Echo post but have had the same complaints for years. “Alexa, \*\*\*\* off” at least works to shut it up. But when I’m about to run out the door, late, And say “Alexa, temperature now”, I want the temperature and not a greeting and an ad!

Amazon totally lost the plot on the Echo and have wasted TONS of money on it.

---

<div class="post-metadata">

**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\
**Post date:** [May 22, 2025, 12:19am UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610/23 "2025-05-22T00:19:33Z")

</div>

> [@kenobi\_65](#):
>
> > [@Bosda\_Di\_Chi\_of\_Tricor](#):
> >
> > Do I need a special app on my phone to do it?
> 
> Not anymore.
> 
> When QR codes were first introduced for general/commercial use, maybe a decade ago, one did need a specialized QR reader app to read them (and direct your phone browser to the correct website). Today, the standard camera apps on iPhones and Android phones have the capability to read the codes, and send you to the websites.

You could, but I always preview the code (which may not be a URL, nor necessarily a QR code for that matter) using a special app. I like [Binary Eye](https://f-droid.org/packages/de.markusfisch.android.binaryeye/)

---

<div class="post-metadata">

**Author:** ![FluffyBob](https://avatars.discourse-cdn.com/v4/letter/f/ecb155/32.png) [@FluffyBob](https://boards.straightdope.com/u/FluffyBob)\
**Post date:** [May 25, 2025, 5:16am UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610/24 "2025-05-25T05:16:38Z")

</div>

This seems like a really high effort complicated way to save a password, not to mention strangely dumb. People are savy enough to generate a QR code and then use it to post their password in plain sight? Wow.

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [May 25, 2025, 7:03am UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610/25 "2025-05-25T07:03:29Z")

</div>

In the case of people using linear barcodes, I saw it happen in warehouse environments where people already had access to a bar code printer for product and location labelling and already had scanners attached to their machines for production purposes. They were convinced the barcodes were a secure way of encoding passwords just because they weren’t immediately human-readable.

---

<div class="post-metadata">

**Author:** ![FluffyBob](https://avatars.discourse-cdn.com/v4/letter/f/ecb155/32.png) [@FluffyBob](https://boards.straightdope.com/u/FluffyBob)\
**Post date:** [May 25, 2025, 1:44pm UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610/26 "2025-05-25T13:44:23Z")

</div>

Okay, that makes more sense. Still a interesting look at the hunan mind.

I guess the other thing I was not acknowledging is that often passwords are seen as an annoying inconvenience that is implemented in an overly restricted way.

---

<div class="post-metadata">

**Author:** ![Reply](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/reply/32/15952_2.png) [@Reply](https://boards.straightdope.com/u/Reply)\
**Post date:** [June 17, 2025, 1:48am UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610/27 "2025-06-17T01:48:08Z")

</div>

@kaylasdad99, if you’re still interested in this, Veritasium put out an excellent video where he hand-built a QR code step by step: [https://www.youtube.com/watch?v=w5ebcowAJD8](https://www.youtube.com/watch?v=w5ebcowAJD8)

It’s the best explanation I’ve seen so far about how they work.

---

<div class="post-metadata">

**Author:** ![kaylasdad99](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kaylasdad99/32/3398_2.png) [@kaylasdad99](https://boards.straightdope.com/u/kaylasdad99)\
**Post date:** [June 17, 2025, 3:26am UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610/28 "2025-06-17T03:26:20Z")

</div>

I watched that. Fascinating stuff.

---

<div class="post-metadata">

**Author:** ![DesertDog](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/desertdog/32/11503_2.png) [@DesertDog](https://boards.straightdope.com/u/DesertDog)\
**Post date:** [June 17, 2025, 4:34am UTC](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610/29 "2025-06-17T04:34:57Z")

</div>

> [@Reply](#):
>
> Veritasium put out an excellent video where he hand-built a QR code step by step

🥱 Call me when you do it with a hammer. 🙂

[![](https://img.youtube.com/vi/V5G_L3d0vYw/maxresdefault.jpg "Can I Make QR Code Damascus?") ](https://www.youtube.com/watch?v=V5G_L3d0vYw)

[Previous page](https://boards.straightdope.com/t/i-don-t-trust-qr-codes-how-can-i-manually-preview-them/1018610.md?page=1)
