Skip to content
All tutorials

/tutorials/how-qr-codes-actually-work

How QR Codes Actually Work

What is actually encoded in a QR code's grid of squares, why it can still scan when partly damaged, and why a code itself has no security of its own.

5 min read

Run QR Code Generator

A QR code is just data encoded as a grid

A QR code stores text (most often a URL) as a pattern of black and white squares following a published, open standard. A scanner reads the pattern, corrects for perspective and rotation using the three large squares in the corners, and decodes it back into the original text exactly, the same input always producing the same code.

Why a partly damaged code can still scan

QR codes include built in error correction, redundant data woven into the code specifically so it can still be read even if part of it is smudged, torn or covered, for example by a logo placed in the middle. Higher error correction levels sacrifice some data capacity in exchange for tolerating more damage, which is why some QR codes look visibly denser than others encoding a similarly short piece of text.

A QR code has no security of its own

A QR code is not inherently more or less trustworthy than a typed link; it just hides the destination from a casual glance until it is scanned. Anyone who scans a QR code goes exactly where it points, with no built in verification of where that actually is, which is exactly why QR codes pasted over existing ones in public places have become a real phishing tactic.

Where they genuinely help

QR codes earn their keep anywhere typing a URL by hand would be impractical: printed materials, physical signage, presentation slides, or handing someone a link without needing them to type anything at all. They are a convenience for a known, trusted destination, not a safety feature.

Trying it yourself

QR Code Generator turns any URL or block of text into a scannable code entirely in your browser, available to download as a PNG. Since sharing a QR code is functionally identical to sharing the link or text it contains, treat it with the same care you would the original.