Mobile Security Awareness Scanner
Explore what a normal webpage can learn from your Android browser, try permission prompts intentionally, and generate a local awareness report.
Before you begin
The web host may independently keep normal server logs (for example, request time and IP address). This page does not send the displayed scan results to a collection server.
1. Device & browser details
These values are hints from your browser and may not identify the exact phone model.
| Check consent, then press Inspect. |
2. Permission demonstrations
Each button triggers a browser permission request. Nothing is requested until you press a button.
Camera/microphone tests briefly request access and immediately stop the media stream. No photo, audio, or video is recorded or uploaded.
3. Generate a QR code for this page
Host this page over HTTPS first, then paste its public URL. The QR image is fetched from a third-party QR service, which receives the URL you enter.
4. Awareness report
After inspection, generate a report summarizing browser hints and which permission tests you tried. Any location you approved is included only in the local report.
What this page cannot normally access
Scanning a QR code does not itself give a website access to IMEI, contacts, call logs, SMS, saved passwords, private files, or all photos. These require other authorized pathways, user action, or in some cases a security vulnerability. Browser model information may be reduced for privacy.
Workshop takeaway: a QR code is usually a way to open a link. The risk depends on where it leads and what a user does next.