How to Scan a QR Code on iPhone and Android (No App Required)
Someone's pointed you at a little black-and-white square and expects you to know what to do with it. You almost certainly don't need to install anything — here's the actual process, plus what to expect once it works.
QR stands for "Quick Response," and the whole point of the format is that a modern phone reads it without any setup on your end. If you've got an iPhone from the last several years or basically any current Android phone, scanning is already built into the camera you use for photos. The steps below cover both, and further down: what different kinds of codes actually do once scanned, what to try if your camera won't cooperate, and how to tell whether a code someone stuck on a wall is worth trusting.
iPhone
This has worked the same way since iOS 11 shipped in 2017, so unless your phone is genuinely ancient, it's already there.
-
Open the Camera app
Not a special scanner app — the regular Camera app has done this since iOS 11. No settings to change.
-
Point it at the code
Hold the phone steady with the whole code in frame. iPhone finds it on its own, usually in under a second.
-
Tap the banner that appears
A notification shows up with a preview of where the code leads. Tap it to open the link, save the contact, or whatever else it does.
Android
Android's a bit less uniform, since every manufacturer puts its own spin on the camera app — but the shape of it is nearly identical across brands, and Google Lens is a reliable fallback if your phone's own camera doesn't cooperate.
-
Open the Camera app or Google Lens
Most Android phones — Samsung, Pixel, and the rest — read QR codes straight from the stock Camera app. If yours doesn't, Google Lens does, and it's already installed on nearly every Android device.
-
Point it at the code
Center the code in frame and hold still for a moment. A small popup or link overlay appears once it locks on.
-
Tap what shows up
The exact wording depends on what the code contains — a link preview, a "save contact" prompt, and so on. Tap it to act on it.
What happens after you scan depends on the code
A QR code is just a container — what your phone does next is determined entirely by what's packed inside it, not by anything about the scanning itself. A handful of formats cover almost everything you'll run into:
- A link. By far the most common. Your browser opens straight to the page, the same as tapping a link anywhere else.
- WiFi credentials. Instead of a webpage, you'll get a "Join Network" prompt with the network already filled in — no typing a password off a card. If that's specifically what you're dealing with, our WiFi QR code walkthrough covers it step by step.
- A contact card (vCard). Rather than opening anything, your phone offers to save a new contact — name, number, email, sometimes a company, all pre-filled. This is what a lot of digital business cards use.
- Plain text. Sometimes a code just holds a short message, with nothing to click through to — it displays directly on screen.
- A payment or app-specific action. Some codes are formatted for a particular app — a payment request, an app-store install link, a social profile — and open that app directly if it's installed, or its web fallback if it isn't.
If a scan doesn't do what you assumed it would — say, you expected a webpage and got a "save contact" prompt instead — that's not a bug. It just means the code wasn't encoding a link in the first place.
If your camera won't pick it up
This is rarely a sign anything's actually broken. The usual culprits: you're holding the phone too close or too far for it to focus, overhead lighting or a glossy laminate is throwing glare across part of the pattern, or the code itself is small, low-resolution, or slightly damaged from wear. Give it a second longer than feels natural, too — auto-detection needs a still, in-focus frame, and a shaky hand is a more common problem than people assume.
If none of that gets you anywhere, skip the live camera entirely and use our QR Code Scanner. Upload a photo of the code — even one you already have saved — and it decodes the text directly in your browser, no live focus or lighting required. It works on any QR code, not a particular type, and nothing you upload is sent anywhere.
Is it actually safe to scan a random QR code?
The scan itself can't do anything to your phone — reading a QR code is no different from your camera reading any other pattern of black and white squares. The risk, such as it is, lives entirely in where the code sends you afterward, exactly like clicking a link in an email. Your phone shows a preview of the destination before it opens anything, so the one habit worth building is actually reading that preview instead of tapping through on reflex.
Be more cautious than usual with a code that's been stuck over what looks like a different one underneath, taped somewhere that doesn't quite make sense (a parking meter, a random flyer with no other branding), or one that immediately asks for a password, card number, or payment. That combination — a code appearing somewhere unexpected and leading straight to a request for sensitive information — is the actual pattern behind QR-based phishing scams, not the act of scanning itself.
Making your own code instead?
If you ended up here because you're about to hand someone a QR code rather than scan one, our QR Code Generator builds a plain link/text code in a few seconds, and the vCard QR Code Generator covers the "save my contact" format described above. Both run entirely in your browser and produce a static code with no subscription behind it — what you generate today keeps working for as long as you need it.
Frequently asked questions
- My phone's camera isn't picking up the code at all. What's wrong?
- Usually one of a few things: you're too far away or too close for the camera to focus, there's glare washing out part of the pattern, or the code itself is damaged, low-resolution, or printed too small. Try a different distance and angle before assuming something's broken. If it still won't lock on, our QR Code Scanner reads a code from an uploaded photo instead of a live camera feed, which sidesteps focus and glare issues entirely.
- Do I need to download an app to scan QR codes?
- No, not on any phone made in the last several years. iPhone has had it built into the Camera app since iOS 11 (2017), and Android's camera or Google Lens covers virtually everything since around 2020. An app is really only worth installing if you're on a genuinely old device that predates native scanning.
- I scanned a code and nothing happened, or it just opened a screenshot. What's going on?
- That usually means the camera detected an image in frame but didn't recognize a QR pattern inside it — often because the phone was in a mode other than photo/video-capable Camera (some third-party camera apps or a locked screen's camera shortcut don't scan). Switch to the default Camera app and try again with the code held steady and well-lit.
- Can I scan a QR code from a screenshot or a saved photo instead of pointing my camera at it live?
- Yes. On iPhone, open the photo and tap the small QR icon that appears in the corner if one is detected, or use the "Visual Look Up" feature. On Android, Google Lens has a "scan image" option for exactly this. Our QR Code Scanner also accepts an uploaded image directly if either of those feels fiddly.
- Is it safe to scan a QR code you find in public — on a poster, a sticker, a table tent?
- Scanning itself is harmless; a QR code is just a way of typing a link without a keyboard. The risk is the same as clicking any unfamiliar link: before tapping through on the preview your phone shows, check that the destination looks like where you'd expect it to go. Be extra cautious with a QR code stuck over another one, taped somewhere odd, or asking for a password or payment immediately — that pattern shows up in QR-based phishing scams (sometimes called "quishing"), and it's the sticker, not the scanning, that's the problem.
- What actually happens when I scan a QR code — does it always open a website?
- Not always — it depends entirely on what's encoded, and the sections above cover the most common ones. Most consumer codes do open a link, but plenty encode something else: WiFi credentials, a contact card, or plain text, each triggering a different prompt instead of a browser tab.