System tower · floor

How to scan a QR code on computer, without uploading it

People search how to scan a qr code on computer in one of two situations: the code is on the screen in front of them and pointing a phone at their own monitor feels absurd, or the code is on paper and the phone is not to hand. Both have straightforward answers, and the first page of Google gives a worse one.

The Windows answer is the interesting one, because almost nobody knows it is there. The Camera app is not only for taking photographs — Microsoft lists code scanning as one of five things it does, next to scanning documents and whiteboards. If your machine has a webcam, you already have a QR scanner, and it works on anything you can hold up to it.

On a Mac we could not find a documented built-in equivalent, and rather than assert one either way, we will say what we checked: Apple documents QR scanning for iPhone and iPad in the iPhone User Guide, and we found no equivalent instruction for macOS. If you are on a Mac, the phone-at-the-screen route is the one that needs nothing installed.

Now the part that survives whichever method you used. Reading a QR code gives you a link. It does not tell you whether the link is safe, and the whole reason a code can be dangerous is that the address is hidden until you decode it. The US Federal Trade Commission puts the check plainly: “If you see a QR code in an unexpected place, inspect the URL before you open it. If it looks like a URL you recognise, make sure it’s not spoofed — look for misspellings or a switched letter.”

Read the domain — the part immediately before the first single slash — and nothing else. Everything after it can be made to say whatever is reassuring, and that is precisely what it is for.

The FTC also gives the rule that matters most on a computer, where codes usually arrive in messages rather than on parking meters: “Don’t scan a QR code in an email or text message you weren’t expecting — especially if it urges you to act immediately.” The alert lists the standard pretexts — a package that could not be delivered, a problem with your account, suspicious activity noticed — and every one of them is built on hurry.

A note on the codes that are supposed to be there. Plenty of legitimate services use QR codes on a screen: signing into an app on your phone, adding an account to an authenticator, pairing a device. Those are fine, and they share a property worth noticing — you started the process. You clicked something, and the code appeared as a result. A code you did not ask for is the category that deserves the check.

And the one thing not to do, which the upload sites make easy: do not decode a suspicious code and then open the link anyway to see what happens. Decoding is the safe half; visiting is the part that can cost you something. If the address does not resolve to somewhere you recognise, the answer is to stop, not to look.

The Windows capability is quoted from Microsoft Support and the security advice from a Federal Trade Commission consumer alert, each read on 21 August 2026. Where we did not find documentation — the macOS case — the page says so rather than filling the gap.

What this tower will not do

It will not send you to an online scanner. Uploading the image hands a stranger the hidden link that was the only thing worth worrying about.

It will not recommend a browser extension for an occasional task. Permanent access to your browsing is a large price for something you do twice a year.

And it will not claim macOS has a built-in scanner. We looked and did not find documentation for one, and saying so is more useful than guessing. What holds instead is simple: the Windows capability is quoted from Microsoft Support and the security advice from a Federal Trade Commission consumer alert, each with the date it was read.