MetaMarshal
Log inSign up free
On-device by default — runs entirely in your browser

That QR code in your photo is scannable by anyone

A boarding-pass barcode carries your name and booking reference — often enough to open your airline booking. A café's Wi-Fi card encodes the password in plain text. An event ticket's code is the ticket. These leaks survive every metadata scrubber, because they're pixels, not EXIF. MetaMarshal's reveal now scans your photo for QR codes and barcodes on-device, tells you what each one carries, and hands you straight to the redaction tool to black it out.

Drop a photo here
or click anywhere in this box to browse
JPEGPNGHEICWEBPTIFFRAW
Processed on your device — nothing is uploaded unless you tap the optional AI estimate.
Nothing leaves your device to clean a photo — the only exception is the optional AI location estimate, which sends a downscaled copy off-device, and only after you tap to confirm.

How it works

1
Drop a photo above; it's scanned for QR codes and barcodes in your browser — using the built-in BarcodeDetector where available, with a jsQR fallback — so nothing is uploaded.
2
See every scannable code found and what kind of payload it holds: a URL, Wi-Fi credentials, boarding-pass data or plain text.
3
Hand off to the redaction tool to black out the code — baked into the pixels, not layered on top.
4
Export the re-encoded copy, which also strips the metadata, and confirm the code no longer scans.

Related tools

Remove metadata from WhatsApp photos
On a normal send, WhatsApp recompresses your photo and drops most of its EXIF — including GPS. But choose 'Document' or …
Open tool →
Clean photo metadata before you sell online
Every photo you snap for a marketplace listing is usually taken at home — and carries the GPS coordinates to prove it. A…
Open tool →
Remove GPS data from photos online
Phones tag most photos with the exact spot they were taken — often accurate to a meter, sometimes with altitude and the …
Open tool →

Frequently asked questions

No. Metadata cleaning removes the descriptive fields alongside the image — GPS, timestamps, device info. A QR code is part of the picture itself, and it stays scannable through cleaning, compression and most resizing. Removing it means redacting the pixels.