Verdetto: QR & Barcode Scanner
See the link before it opens. Looks a product up, on your phone.
Version: 1.0.8
Added: 26-09-2026
Updated: 26-09-2026
Added: 26-09-2026
Updated: 26-09-2026
Verdetto is a free QR code and barcode scanner for Android with no ads and no fake buttons. It shows the link before it opens, is built to read damaged codes, and checks scanned content for warning signs on the phone. It never says anything is safe: "No warnings found" means none of its checks matched.
See the link before it opens
The address, the network name or the contact is shown before anything opens. The built-in checks run on the phone: lookalike names and brand misuse, unusual ports, plain http, downloads, tracking tags, open redirects, IP hosts, premium numbers, prefilled SMS, open Wi-Fi, payment codes, and a safety list of reported phishing, scam and sanctions entries, built in the open, signed, and checked on your phone. With online lookups on, a shortened link is expanded and a domain's age is read. The result is one line: Danger, Caution, or No warnings found. A link never opens by itself unless you turn that on, and then only after a three-second cancel. Whether to open, join, dial or act is your decision.
Reads torn, faded and creased codes
Faded, torn, tilted or inverted: keep aiming and it keeps trying across frames instead of asking you to hold still. Several codes in view are outlined and you pick the one you meant. Tap to focus, pinch to zoom, or scan a photo or a shared image. It reads QR codes and their small forms, Data Matrix, Aztec, PDF417, MaxiCode, the retail and industrial barcodes, GS1 packs, boarding passes, driver's licenses and vehicle numbers.
Online lookups you can turn off
Online lookups are on unless you turn them off, with one switch. With them on, a product, book, record, journal or device is looked up in a small file your phone fetches and reads itself, so the number goes to no database; a medicine number of one national register, a device number the file does not know and a vehicle number go to their public registers. Where the app's recall copy has reports for a food's barcode, its sheet shows them. The privacy policy names every request the app makes and who receives it.
Sources: fdc.nal.usda.gov, fda.gov, nlm.nih.gov, cpsc.gov, nhtsa.gov, fueleconomy.gov, cima.aemps.es, aifa.gov.it, medicaments.gouv.fr, ec.europa.eu. Verdetto is not a government or political app.
Make your own codes
A code from text, a website, Wi-Fi, a contact, a calendar event, an email, a phone number, an SMS, a location or your own card, as a QR code or a barcode, with a look check that it reads on this phone before you print or share it. The code carries what you put in and nothing else.
History that is yours
Search, filters, favorites that always stay, a keep-for setting, and a private session that saves nothing to history. Export it all as CSV, never with a password or a sign-in secret in it, and import a CSV back. Wi-Fi passwords, sign-in secrets, payment addresses and contact cards are sealed with a key held in the phone's keystore, and a backup carries the sealed record without the key.
Made for the hand
A Quick Settings tile and two home-screen widgets, list mode with a CSV export, a left-handed layout, results read aloud, light, dark and pure black themes, eleven languages. Android 8 and later.
Free, no ads, no tracking by Verdetto
No accounts, no analytics in the app. Camera frames are read on the phone and dropped. Every check and every decode is free for everyone, kept that way by the people who use it: an optional contribution, once or monthly, earns a thank-you badge and the small extras; nothing you need is behind it. It never nags: no rating prompts.
The safety list, the app's code and its scanner engine are open source; the addresses are at verdettoqr.com/source. The checks are limited by design and no check catches every scam; the full wording is under Terms of use in the app.
On Mastodon: @VerdettoQR@mastodon.social. On Bluesky: @verdettoqr.com.
See the link before it opens
The address, the network name or the contact is shown before anything opens. The built-in checks run on the phone: lookalike names and brand misuse, unusual ports, plain http, downloads, tracking tags, open redirects, IP hosts, premium numbers, prefilled SMS, open Wi-Fi, payment codes, and a safety list of reported phishing, scam and sanctions entries, built in the open, signed, and checked on your phone. With online lookups on, a shortened link is expanded and a domain's age is read. The result is one line: Danger, Caution, or No warnings found. A link never opens by itself unless you turn that on, and then only after a three-second cancel. Whether to open, join, dial or act is your decision.
Reads torn, faded and creased codes
Faded, torn, tilted or inverted: keep aiming and it keeps trying across frames instead of asking you to hold still. Several codes in view are outlined and you pick the one you meant. Tap to focus, pinch to zoom, or scan a photo or a shared image. It reads QR codes and their small forms, Data Matrix, Aztec, PDF417, MaxiCode, the retail and industrial barcodes, GS1 packs, boarding passes, driver's licenses and vehicle numbers.
Online lookups you can turn off
Online lookups are on unless you turn them off, with one switch. With them on, a product, book, record, journal or device is looked up in a small file your phone fetches and reads itself, so the number goes to no database; a medicine number of one national register, a device number the file does not know and a vehicle number go to their public registers. Where the app's recall copy has reports for a food's barcode, its sheet shows them. The privacy policy names every request the app makes and who receives it.
Sources: fdc.nal.usda.gov, fda.gov, nlm.nih.gov, cpsc.gov, nhtsa.gov, fueleconomy.gov, cima.aemps.es, aifa.gov.it, medicaments.gouv.fr, ec.europa.eu. Verdetto is not a government or political app.
Make your own codes
A code from text, a website, Wi-Fi, a contact, a calendar event, an email, a phone number, an SMS, a location or your own card, as a QR code or a barcode, with a look check that it reads on this phone before you print or share it. The code carries what you put in and nothing else.
History that is yours
Search, filters, favorites that always stay, a keep-for setting, and a private session that saves nothing to history. Export it all as CSV, never with a password or a sign-in secret in it, and import a CSV back. Wi-Fi passwords, sign-in secrets, payment addresses and contact cards are sealed with a key held in the phone's keystore, and a backup carries the sealed record without the key.
Made for the hand
A Quick Settings tile and two home-screen widgets, list mode with a CSV export, a left-handed layout, results read aloud, light, dark and pure black themes, eleven languages. Android 8 and later.
Free, no ads, no tracking by Verdetto
No accounts, no analytics in the app. Camera frames are read on the phone and dropped. Every check and every decode is free for everyone, kept that way by the people who use it: an optional contribution, once or monthly, earns a thank-you badge and the small extras; nothing you need is behind it. It never nags: no rating prompts.
The safety list, the app's code and its scanner engine are open source; the addresses are at verdettoqr.com/source. The checks are limited by design and no check catches every scam; the full wording is under Terms of use in the app.
On Mastodon: @VerdettoQR@mastodon.social. On Bluesky: @verdettoqr.com.