What is a QR Code: everything you need to know

What is a QR Code?

A QR Code is a two-dimensional barcode that stores data in a grid of black and white squares, readable by any camera with a scanning app. Point a phone at one and the destination, a website, a Wi-Fi password, a contact card, resolves in under a second.

A QR Code is not a fixed image with the equivalent of a phone number printed on it. It is a pointer, and on the most common type in business use, the destination behind that pointer can change after the code is already printed, laminated, and hanging on a wall.

A brief history of QR Codes

QR Codes were invented in 1994 by Masahiro Hara, an engineer at Denso Wave, a Toyota subsidiary. The goal was practical: factories needed a faster way to track car parts moving through assembly lines. Barcodes could only hold around 20 characters, which was not enough. Hara's two-dimensional format stored 100 times more data and decoded in under a second, solving the problem.

Denso Wave released the specification royalty-free, which let the format spread without licensing friction. QR Codes moved into consumer markets through the early 2000s, appearing on product packaging, event tickets, and print ads, but adoption was slow because scanning required a separate app.

That changed in 2017 when Apple and Google added native QR scanning to their camera apps, removing the only real barrier to everyday use. The pandemic accelerated adoption further, turning the QR Code into a default interaction layer between physical surfaces and the internet.

How does a QR Code work and store data?

A QR Code stores data in binary: the black and white squares represent strings of 0s and 1s, and a scanner decodes that pattern back into text, a link, or a file reference in the time it takes to focus a camera.

Two versions exist, and the difference decides how the code behaves after it is printed:

• Static QR Code: the destination is encoded directly into the pattern. Print it, and the destination is locked for good, the same way ink on paper is locked.
• Dynamic QR Code: the code stores a short redirect link instead. The business that created it can repoint that redirect to a new destination at any time, without reprinting anything.

The distinction between static and dynamic QR Codes comes down to the ability to change the destination without reprinting.

For the full mechanical breakdown of how QR Codes store and correct for damaged data, see how much data a QR Code can hold. For a deeper look at the split between the two formats, see static versus dynamic QR Codes.

‍

Types of QR Codes

QR Codes split first by whether their destination can change, then by what kind of content they carry.

1. Static QR Code: destination baked directly into the pattern, such as a Wi-Fi password or a plain text string. Locked once printed.
2. Dynamic QR Code: routes through a short redirect link, so a coupon, a restaurant menu, or a contact card can be corrected or swapped without touching the printed code.
3. Website QR Code: redirects to a page.
4. vCard QR Code: hands over contact information without any typing.
5. Wi-Fi QR Code: joins a network on scan.
6. Menu QR Code: opens a hosted page for restaurant ordering.

The amount of data a code carries also varies by content type. A code that stores plain numbers holds more characters than one storing mixed letters and symbols, and one storing a full-color logo or Japanese kanji text holds less still. Short redirect links leave the most room for error correction, which is why dynamic codes tend to scan more reliably than static ones carrying long raw text.

See the full QR Code type catalog for every content variant, including the less common ones.

The most popular QR Code styles

Standard QR Codes remain the most versatile and widely used option across industries, but a few other two-dimensional formats show up in specific niches:

1. PDF417: developed in 1991, encodes large volumes of data. Found on identification cards, inventory labels, and transportation tickets.
2. Aztec Code: uses a central finder pattern instead of a quiet zone, making it space-efficient. Common on commercial bills and vehicle registration documents.
3. Semacode: designed for mobile devices, encodes URLs in a DataMatrix format.
4. MaxiCode: created by UPS, optimized for postal and logistics sorting.

None of these read with a standard phone camera the way a QR Code does, which is the main reason QR remains the default for anything meant to reach a consumer's phone rather than a dedicated warehouse scanner.

‍

QR Code size: minimum size and dimensions

The minimum size for a QR Code is 2 × 2 cm (roughly 0.8 × 0.8 inches). Below that threshold, most phone cameras struggle to resolve the pattern cleanly, especially in low light or at an angle.

The right size depends on scanning distance. A useful rule: the code should be at least one tenth the distance from which it will be scanned. A code meant to be scanned from 1 meter away needs to be at least 10 cm wide.

A few other factors affect the minimum viable size:

• Error correction level: higher correction (level H) adds more data to the pattern, requiring a larger code to stay scannable.
• Quiet zone: every QR Code needs a blank border of at least four modules wide around it. Cutting into this margin causes scan failures regardless of size.
• Print quality: low-resolution printing degrades the edges of each module, effectively shrinking the readable area.

For print materials, 3 × 3 cm is the practical safe minimum. For billboard or large-format use, scale proportionally to the expected scan distance.

Are QR Codes safe?

Yes, QR Codes are safe as a technology. The more useful question is whether the specific code in front of you is trustworthy, and that depends on two things: who made it, and whether its destination can change after the fact.

Common QR Code scams

The FBI has issued public warnings about QR Code scams, and three attack patterns account for most of the real-world cases:

• Quishing: a QR Code linked to a malicious site, placed inside an email or text that pretends to be from a legitimate sender. It banks on the fact that most people don't scrutinize a QR Code the way they'd scrutinize a suspicious link.
• Sticker-swapping: a real QR Code, on a parking meter, a poster, a restaurant table, physically covered with a fake one that leads somewhere else.
• QRLJacking: a faked "log in with QR Code" screen that harvests a session and hijacks an account, a pattern that works specifically because so many services now offer QR login as a convenience.

Why dynamic QR Codes are a different risk category

None of those three attack patterns explain the mechanic that makes dynamic QR Codes genuinely different from a printed phone number. A dynamic QR Code's destination lives on a server, not in the printed pattern. Its owner can repoint it at any time, which is the entire point: a restaurant updates a menu, a property manager fixes a broken link, a marketer redirects a campaign after launch. The same mechanism that makes dynamic codes useful also means a compromised account can silently redirect every printed copy of that code to a new destination, and nothing about the physical code itself changes to warn you. That's different from a static code, a barcode, or a printed phone number, none of which can be redirected after the fact.

That doesn't make QR Codes unusually dangerous. It makes them exactly as trustworthy as whoever controls the destination, which has always been true of every link anyone has sent by text or email.

Best practices to prevent QR Code scams

• Look at the physical code for a sticker or overlay that doesn't quite match the surrounding print.
• Check that the destination, once it loads, matches what the context promised.
• Treat a QR Code inside an unsolicited email or text with the same caution as a suspicious link.
• Confirm a login QR Code is on the service's own site or app, not a forwarded screenshot.
• For codes a business owns, restrict who on the team can edit a destination, since a compromised account can redirect every printed copy at once.

How Uniqode meets compliance requirements

A QR Code's security is only as strong as the account managing its destination, which is why the platform behind a dynamic QR Code matters. Uniqode holds SOC 2 Type II certification, is GDPR compliant, is HIPAA compliant, and is ISO 27001 certified, backed by a 99.9% uptime SLA on the redirect infrastructure that dynamic codes depend on. For a security or compliance team evaluating who can create or repoint a QR Code, that means centralized access controls, an audit trail of who changed a destination and when, and a platform built to the same certification bar as the rest of a company's software stack, not a standalone tool with none of it.

How businesses actually use QR Codes

Businesses use QR Codes to bridge printed and digital touchpoints, connecting a menu to a table stand, a product label to a compliance certificate, or a print ad to a redemption page. A few patterns come up more than others:

• Marketing and direct mail, tracked with a dynamic code tied to each mailer
• Hospitality, redirecting a single table-stand code to menus, schedules, and resort maps
• Recruitment, collecting candidate documents through a QR-based form
• Product packaging, verifying compliance or linking to product information
• E-commerce and retail promotions, driving scans from a print ad to a discount page

What is a QR Code used for? Top 7 real-life QR Code applications and their impact

In an interview with the Wall Street Journal, Alfredo Colas, senior vice president of data, analytics, and digital go-to-market at P&G, said the best use cases of QR Codes are probably the ones nobody has thought of yet. Here are seven ways businesses are already using them, with a real-life example and impact for each.

1. Marketing. BBQGuys, a US-based outdoor grilling equipment company, placed QR Codes on its programmatic direct mail pieces, automatically sent whenever someone visited its landing pages. Dynamic QR Codes fed back first-party data accurate to each mailer. Impact: a 1925% engagement boost and a 16% increase in month-over-month average order value.
2. Hospitality. Marriott Aruba placed customized QR Codes on table stands across its restaurants and resort locations, redirecting to digital menus, posters, gym schedules, and resort maps to implement a touchless solution during Covid. Impact: over 80,000 customers reached and $150,000 saved in paper costs from 150,000-plus scans.
3. Recruitment. General Dynamics Electric Boat, a US government vendor, used QR Codes to engage candidates and manage recruitment resources in one place, gathering candidate data through QR-based forms. Impact: nearly 40,000 scans, a 95% increase in candidate document uploads, and 2,000-plus internship applications submitted.
4. Accessibility. Tactile Graphics, a kinesthetic learning company for the visually impaired, used QR Codes in its learning materials for instant auditory feedback on every page. Impact: a 90% increase in user engagement and a 65% surge in learning efficiency across 150-plus countries.
5. PLU stickers. Mr Apple, a New Zealand apple grower and exporter, placed QR Code stickers on individual apples, taking customers to product information and social channels in their own language, set by location and device. Impact: QR Code scans now drive over 50% of the company's website traffic.
6. E-commerce. Flipkart, one of India's largest commerce brands, used QR Codes in a newspaper print ad for its annual sales campaign, linking to discounts and hidden offers. Impact: 2 million-plus scans and 536,000 unique customers.
7. Product packaging. Maesa, a US-based skincare brand, placed compliance QR Codes on product packages, letting customers scan for a certificate of analysis. Impact: over $10 million in loss prevention and scans from 500-plus cities.

Benefits of using QR Codes for businesses

• Works with existing infrastructure: no significant investment or new hardware, since most phones already carry a QR-capable camera.
• Collects first- and zero-party data: one of the most effective ways to gather this data from offline touchpoints as third-party cookies fade.
• Increases conversion rate: cuts the interaction cost between an ad and the action it is asking for.
• Cost-effective: a small upfront cost to generate, reusable across a print run, with dynamic codes avoiding reprint costs entirely when details change.
• Better customer experience: a customized, on-brand code reads as more trustworthy to scan than a plain black-and-white one.
• Environmentally friendly: replaces paper menus, flyers, and postcards with a single reusable code.
• Trackable: scan data measures performance in ways a printed-only campaign never does.

Are QR Codes free to create?

Static QR Codes are free to generate on most platforms, including Uniqode. You get a permanent, scannable code at no cost. The trade-off is that the destination is locked the moment the code is created. If a URL changes, a menu is updated, or a campaign ends, the printed code becomes dead and has to be reprinted from scratch.

Dynamic QR Codes require a paid plan. The cost covers the redirect infrastructure that makes editability, scan tracking, and destination changes possible after printing. Uniqode's paid plans start at $9 per month, and the Essential plan already includes features that most competitors reserve for much higher tiers. For businesses running print campaigns, the math is straightforward: one reprint job typically costs more than a year of a dynamic QR Code subscription.

The right choice depends on the use case:

• Static: a Wi-Fi password, a permanent contact card, a one-time event with no moving parts.
• Dynamic: anything tied to a campaign, a menu, a product page, or content that will need updating after the code is in the wild.

For a tested comparison of the best options on the market, see the best dynamic QR Code generators in 2026.

‍

QR Code usage statistics

QR Codes have moved well past early-adopter territory. Data from Uniqode's State of QR Codes 2026 report shows how deeply the format has embedded itself into everyday consumer behavior.

• 70% of consumers scan QR Codes at least once a month, and only 8% say they have never scanned one.
• 71% of consumers describe QR Codes as at least somewhat helpful in their daily lives. Only 12% find them not useful.
• 75% of consumers scan QR Codes to get more information, making it the dominant motivation by a wide margin.
• Restaurants top the list for where consumers scan most, at 58%, followed by websites at 42% and product packaging at 40%.
• 58% of consumers feel somewhat or very confident that QR Codes are safe to scan.
• 83% of consumers are willing to share personal data after scanning a QR Code, provided there is transparency about how it will be used.

The data points to a format that consumers have normalized. The bar has shifted from convincing people to scan to delivering an experience worth scanning for.

QR Code vs. barcode

QR Codes are two-dimensional barcodes that store data vertically and horizontally, whereas traditional barcodes only store data in horizontal lines (hence one-dimensional). Being 2D helps store more data and makes QR Codes scannable from any direction.

Because QR Codes were invented to address the limitations of traditional barcodes, they have several advantages over them, which are:

‍

This is just the tip of the iceberg when it comes to QR applications! Check out 34 Epic QR Code Examples from Brands that you can use!

Busting QR Code myths

With QR Code all around you and skyrocketing since the COVID-19 pandemic, there's a good chance you know a myth or two about it. It's expected; popular things have to go through this 😌. But you deserve to know the truth. Here's busting some QR Code myths: