QR SafeCode — know what a QR code does before you tap it
A QR code can open a fake banking site, install an iOS configuration profile that decrypts all of your encrypted traffic, add a hostile eSIM that takes over your phone number, or dial a code that wipes your phone. None of that is visible by looking at the code.
What QR SafeCode checks
Every scan is checked against 49 kinds of attack, including lookalike domains written in mixed alphabets, Punycode addresses decoded to show what they really say, IP addresses disguised as ordinary numbers, link shorteners and open redirects, dial codes that can factory-reset a phone, premium-rate numbers, evil-twin Wi-Fi networks, injected database and shell commands, invisible and text-reversing characters, and a second QR code hidden inside the first.
Everything runs on your phone
Scanning and analysis happen entirely on the device. The content of a code you scan is never transmitted to us or to anyone. When a code is judged dangerous, the app does not contact that server at all — not even to check it — so an attacker never receives your IP address and never learns their code was scanned.
Download QR SafeCode on the App Store · Privacy · Support