What QR codes actually scan and store

A QR code is a square barcode that holds information in a pattern of black and white squares. When you point a camera at it, the scanner reads that pattern and decodes what is inside — usually a web address, plain text, contact details, or WiFi login information. The code itself does not do anything on its own. It is just a container. What happens next depends entirely on what the code contains and what your phone does with it.

Most QR codes link to a website. Your phone reads the code, extracts the URL, and opens your browser. Some codes contain a phone number, which your phone can dial. Others hold a vCard — a contact file — which your phone can save to your address book. A few contain WiFi credentials, which your phone can use to connect to a network automatically. That is the full list of what QR codes do: they store information in a compact form and hand it to your phone to process.

Key Takeaways

  • QR codes store only data — a web address, text, phone number, or contact information — and your phone decides what to do with that data.
  • Scanning a QR code cannot install software, charge money, access your files, or turn on your camera or location without your permission.
  • A QR code that links to a malicious website can still harm you if you visit that site, so inspect the URL before tapping it.
  • Any smartphone camera with a QR reader built in can scan codes; you do not need a separate app unless your phone is older than five years.
  • QR codes expire only if the service hosting the link shuts down; the code itself has no expiration date.

What QR codes cannot do on their own

A QR code cannot charge your credit card, steal your passwords, turn on your microphone, access your location, or install malware. The code is inert data. It cannot execute commands or access your phone's hardware. What it can do is point your phone to a website, and that website could be dangerous — but the danger comes from the website, not from the code itself.

This distinction matters because it changes how you stay safe. You do not need to fear the code. You need to check where it points. Before you tap a link that a QR code reveals, look at the URL. If it is from a source you do not recognize, or if it looks suspicious, do not open it. That is the only real risk: following a link to a bad website.

How to scan a QR code safely

On most phones made in the last five years, open your camera app and point it at the QR code. A notification will appear with the URL or information the code contains. Tap the notification to open it. You do not need to read a separate QR reader app unless your phone is older or your camera does not have this feature built in.

Before you tap the link, read the URL that appears. If it starts with https:// rather than http://, the connection is encrypted. If the domain name is one you recognize — like amazon.com or your bank's website — it is probably safe. If the URL is shortened (like bit.ly or tinyurl), you cannot see where it actually goes, so avoid it unless you trust the source that shared the code.

Some phones let you scan without opening the link when ready. On iPhone, you can long-press the notification to see the full URL before tapping. On Android, some QR readers show the URL in a preview. Use this feature to inspect the link before you commit to opening it.

QR codes in real-world use

Restaurants use QR codes to link to digital menus. Retailers use them to link to product pages or promotional offers. Event organizers use them to link to ticket information. Businesses use them to link to WiFi networks. In each case, the code is straightforward a shortcut — a way to avoid typing a long URL or remembering a complicated address.

Some QR codes are dynamic, meaning the business that created them can change where the code points without changing the code itself. If you scan the same code weeks later, it might link to a different page. This is useful for businesses but means you cannot assume a code always points to the same place.

When QR codes stop working

A QR code does not expire on its own. The pattern of squares will remain readable forever. However, if the code links to a website and that website shuts down or moves, the link will break. You will scan the code and see an error message instead of the page you expected.

Some businesses create temporary QR codes for limited-time offers or events. These codes do not expire technically, but the business removes the page they link to after the event ends. If you scan the code after that date, you will get a 404 error or a message saying the page no longer exists.

QR codes versus other barcode types

QR codes hold more information than traditional barcodes and can be read from any angle, not just straight on. A standard barcode requires a straight scan and holds only a product number. A QR code can be tilted, partially obscured, or scanned from a distance, and it can hold a full URL or contact information.

This makes QR codes more flexible for marketing and information sharing. You can print a QR code on a poster, a business card, or a package, and it will work from any direction. A traditional barcode requires precise alignment and works only in one orientation.

Frequently Asked Questions

Can a QR code give my phone a virus?

The code itself cannot. However, if the code links to a malicious website, that website could try to infect your phone. Always check the URL before tapping it. If the domain looks unfamiliar or suspicious, do not open it.

Do I need WiFi to scan a QR code?

You need WiFi or mobile data only if the code links to a website. If the code contains plain text, a phone number, or contact information, your phone can read and process it offline. Once you tap the link, your phone will need internet to load the page.

Can someone track me through a QR code?

The code itself cannot track you. However, if the code links to a website, that website can track your visit the same way any website can — by logging your IP address or setting cookies. This is no different from clicking a regular link. Check the website's privacy policy if you are concerned.

What happens if I scan a QR code from an unknown source?

Your phone will show you the URL before you open it. Read the address carefully. If it looks suspicious or comes from a source you do not trust, do not tap it. There is no harm in scanning; the harm comes only if you open the link.

Can QR codes work offline?

Your phone can scan and read a QR code offline. However, if the code links to a website, you will need internet to open that link. Codes that contain contact information, WiFi credentials, or plain text work completely offline.