Media
3 items
Description
Generate QR codes, scan them for phishing red flags, and strip hidden metadata from files — 100% local, nothing leaves your browser. QRShield is a privacy-first toolkit for QR codes and file metadata — everything runs locally in your browser. Nothing is ever uploaded, logged, or sent to a server. GENERATE Create QR codes for URLs, plain text, Wi-Fi logins, email, phone, SMS, or a contact card (vCard). Customize size, error-correction level, and colors. Export as PNG or SVG, or copy straight to your clipboard. SCAN & VERIFY Upload or drop an image containing a QR code and QRShield decodes it on-device, then checks the content for common phishing red flags before you ever open it: raw IP addresses instead of domains, punycode look-alike domains, hidden destinations behind "@", URL shorteners, abused top-level domains, and brand-impersonation patterns. You get a clear safe / caution / high-risk verdict and choose whether to open the link — nothing opens automatically. REMOVE METADATA Strip hidden metadata from files before you share them: - Images (JPG, PNG, WebP): removes EXIF data, GPS location, camera/device info, and embedded thumbnails. - PDF: clears the document Info dictionary (author, title, producer, etc.) and embedded XMP metadata. - Word / Excel / PowerPoint (DOCX, XLSX, PPTX): strips author name, company, last-modified-by, custom properties, embedded thumbnails, and tracked-change author names. - MP3: strips ID3v1/ID3v2 tags. Every cleaned file is automatically re-scanned and shows a "Verified clean" badge (or flags anything left over), plus a SHA-256 hash of the output so you can independently verify the file's integrity. WHY LOCAL-ONLY MATTERS QRShield has no backend, makes no network requests, and requests no account or login. The files you clean and the QR codes you generate or scan never leave your browser tab. Full source is human-readable — nothing is minified beyond the three vendored open-source libraries (qrcode-generator, JSZip, pdf-lib, jsQR), which are bundled locally so the extension never fetches remote code.