CodeWard QR Scanner & Creator

A QR code is a link you cannot read. That is the whole problem.

Stickers pasted over parking meters, restaurant menus and EV chargers are a real and growing scam, and most scanners race you straight to the browser.
CodeWard does the opposite: it reads the code, checks where the link actually goes, and shows you the answer. Nothing opens until you say so.

CHECKS THAT RUN BEFORE ANYTHING OPENS

Eighteen checks run against every link, on your phone, in about the time it
takes to lift it away from the code. They look for the patterns real scams
use:

• Lookalike domains — one or two characters off a site you know
• A brand name buried in a subdomain, where your eye stops reading
• Mixed alphabets, where a Latin "a" has been swapped for a Cyrillic one
• Addresses that hide the destination behind a shortener
• Links that download a file rather than open a page

The part of the address that decides where you land is the only part shown
brightly. Everything else is dimmed. People read hostnames left to right and
stop early, which is exactly what "paypal.com.account-verify.ru" is built to
exploit — so CodeWard puts the emphasis where the truth is.

When a link looks dangerous, the screen changes shape. "Close without opening" becomes the big button and "Open anyway" is demoted to a plain one. The safe choice should be the easy one, not just the recommended one.

IT WORKS WITH NO SIGNAL

Every check runs on the device. There is no lookup, no server and nothing sent anywhere — which matters most at the exact moment it usually matters, standing at a machine with one bar of signal. Two optional features do touch the network: revealing where a shortened link lands, and an optional threat-feed check that sends only the hostname, never the rest of the address. Both are off until you turn them on. With both off, the app makes no connections at all.

A GENERATOR THAT PRODUCES CODES THAT SCAN

Make codes for links, Wi-Fi networks, contact cards and plain text. Colours are offered as tested foreground-and-background pairs, because two independent colour pickers are how people end up with a yellow code on a white card that no scanner can read. Export as PNG or as SVG for print.

HONEST ABOUT WHAT IT CANNOT DO

The checks find deceptive patterns. They cannot tell you whether an ordinary
looking site is honest. A brand-new phishing page on a clean domain will score well here, and the app says so plainly on the results screen rather than
burying it. A clean result means nothing suspicious was found. It is not a
promise, and CodeWard will not pretend otherwise.

ALSO IN THE APP

• Scan from a photo or screenshot, including images shared in from other apps
• Batch mode for a shelf of labels or a stack of tickets
• History kept on the device only, searchable, exportable as CSV
• Paste any link to run the same checks without scanning
• No account, no sign-in, no sync

PERMISSIONS

Camera, requested when you open the scanner, with the reason shown first.
Frames are analysed on the device and never recorded, saved or uploaded.

CodeWard is supported by a single banner ad. There is no video, no full-screen interruption and nothing between you and a scan.