What Is a QR Code and How Does It Actually Work?
A plain-language explanation of what a QR code is, how it stores data, and why it became so widely used.
QR codes are everywhere now — restaurant menus, payment counters, posters, product packaging — but most people who use them daily couldn't explain how the little black-and-white square actually works. Here's the short version.
It's just a compact way to store data
A QR (Quick Response) code is a two-dimensional barcode. Where a traditional barcode stores data in a single line of varying-width bars (readable in one direction only), a QR code stores data in a grid of black and white squares, readable in two dimensions. That extra dimension is why a QR code can hold far more information than a traditional barcode in roughly the same physical space — a full website URL, Wi-Fi credentials, or a contact card, rather than just a short product number.
The three corner squares aren't decoration
Look closely at any QR code and you'll notice three larger square patterns in three of the four corners. These are position markers — they let a scanner instantly figure out the code's orientation and boundaries, even if the code is tilted, rotated, or partially at an angle to the camera. This is a big part of why QR codes scan so reliably compared to older barcode formats, which often need to be held straight and steady.
Built-in error correction
QR codes include redundant data specifically so they can still be read even if part of the code is damaged, dirty, or obscured — which is also why you'll sometimes see a small logo placed in the middle of a QR code without breaking it. Depending on the error-correction level used when the code was generated, a QR code can typically still be read correctly even with a meaningful percentage of it obscured or damaged.
What can actually be stored in a QR code
- A URL — the most common use, opening a website when scanned.
- Plain text — any short message or piece of information.
- Wi-Fi credentials — network name and password, so a phone can connect automatically without typing anything.
- A contact card (vCard) — name, phone number and email, added directly to contacts after scanning.
- Payment information — used heavily in QR-based payment systems.
- An event or calendar entry, a phone number to dial, or an SMS pre-filled with text.
Why QR codes shouldn't be treated as automatically "safe"
Because a QR code can hide a URL that isn't visible until you scan it, they've also become a target for scams — a scanned code can lead to a phishing site or a malicious download just as easily as a legitimate one. The code itself isn't inherently dangerous; the risk is in blindly opening whatever it points to without checking first.
A simple safety habit
Use a scanner that shows you exactly what a code contains — a full URL, plain text, Wi-Fi details — before taking any action like opening a link or connecting to a network. That one extra second of reading before tapping "open" is the single most effective protection against QR-based scams.
Scan any QR code and preview exactly what it contains before opening it, with QR Code Scanner →
QR Code Scanner
Fast QR & barcode scanner with a built-in QR code generator
More about QR Code Scanner
Check the Link Before You Open It: A Quick Routine
A ten-second routine for reading the address in a scanned QR code and spotting the signs of a suspicious link.
Read article →QR Codes in the Classroom: Ideas for Teachers
Simple ways teachers use QR codes: quizzes, treasure hunts, reading extras and quick links to resources.
Read article →QR Scanners and Camera Permissions: What to Allow
Why a scanner app needs camera access, which other permissions it does not need, and how to review them.
Read article →Shortened Links in QR Codes and What They Hide
Why people shorten links for QR codes, how it changes the scanning experience, and how to stay careful with them.
Read article →