Can a QR code contain a virus?

A QR code itself is just data — usually a URL or text — and cannot execute code on its own. Risk comes from where the encoded link takes you, the same as clicking any unfamiliar link.

A static QR code (the kind generated by encoding content directly) does not expire on its own — it works for as long as the destination it points to remains valid.

How much data can a QR code hold?

Up to about 4,300 alphanumeric characters at the largest standard size, though practical codes usually encode much less (like a URL) to keep the grid simple and scannable.

← Learn

QR Codes

What is a QR code?

Reviewed by the Tabreon team · Last updated: September 2026

Quick answer

A QR code is a two-dimensional barcode that stores data — usually a URL — in a grid of black-and-white squares that a phone camera can scan and decode instantly.

Why this matters

QR codes bridge printed and physical materials with digital content. Understanding what one actually stores helps you avoid common mistakes, like encoding something that changes later, or making one too dense to scan reliably.

Definition

"QR" stands for Quick Response. A QR code is a matrix (2D) barcode standardized as ISO/IEC 18004. Unlike a traditional 1D barcode, which only stores data along one axis, a QR code stores data in both dimensions, letting it hold far more information — typically a few hundred to a few thousand characters — in a small printed area.

How it works

The encoder converts your input (a URL, text, WiFi credentials, etc.) into binary data, adds error-correction data, and arranges the result into a grid of black and white modules along with fixed "finder" squares in three corners that let a scanner detect the code's orientation and boundaries. A scanning app decodes the modules back into the original data and, for a URL, opens it directly.

Step by step

1Encoding. Your input text is converted to a binary stream and split into data segments.
2Error correction. Redundant data is added so the code still scans even if part of it is damaged or obscured.
3Placement. Data and error-correction bits are arranged into the grid pattern, alongside finder and alignment markers.
4Scanning. A camera locates the finder squares, reads the grid, and reverses the encoding to recover your original data.

Common mistakes

Encoding a URL that later changes — a static QR code cannot be edited after printing, so the link needs to stay valid indefinitely.
Printing a QR code too small relative to how far away it will be scanned from.
Using low contrast colors (e.g. light gray on white) that scanners struggle to detect.

Best practices

Test the printed code with multiple phones before mass-printing.
Keep a quiet margin (blank space) around the code — scanners need it to detect the boundary.
Shorten long URLs before encoding to keep the grid simpler and easier to scan.

Frequently asked questions

Related tools

QR Generator

Related guides

Browse all QR tools →

Sources

ISO/IEC 18004 — QR Code bar code symbology specification