What Is a QR Code and How Does It Actually Work?

QR codes are everywhere now — restaurant menus, payment counters, posters, product packaging — but most people who use them daily couldn't explain how the little black-and-white square actually works. Here's the short version.

It's just a compact way to store data

A QR (Quick Response) code is a two-dimensional barcode. Where a traditional barcode stores data in a single line of varying-width bars (readable in one direction only), a QR code stores data in a grid of black and white squares, readable in two dimensions. That extra dimension is why a QR code can hold far more information than a traditional barcode in roughly the same physical space — a full website URL, Wi-Fi credentials, or a contact card, rather than just a short product number.

The three corner squares aren't decoration

Look closely at any QR code and you'll notice three larger square patterns in three of the four corners. These are position markers — they let a scanner instantly figure out the code's orientation and boundaries, even if the code is tilted, rotated, or partially at an angle to the camera. This is a big part of why QR codes scan so reliably compared to older barcode formats, which often need to be held straight and steady.

Built-in error correction

QR codes include redundant data specifically so they can still be read even if part of the code is damaged, dirty, or obscured — which is also why you'll sometimes see a small logo placed in the middle of a QR code without breaking it. Depending on the error-correction level used when the code was generated, a QR code can typically still be read correctly even with a meaningful percentage of it obscured or damaged.

What can actually be stored in a QR code

• A URL — the most common use, opening a website when scanned.
• Plain text — any short message or piece of information.
• Wi-Fi credentials — network name and password, so a phone can connect automatically without typing anything.
• A contact card (vCard) — name, phone number and email, added directly to contacts after scanning.
• Payment information — used heavily in QR-based payment systems.
• An event or calendar entry, a phone number to dial, or an SMS pre-filled with text.

Why QR codes shouldn't be treated as automatically "safe"

Because a QR code can hide a URL that isn't visible until you scan it, they've also become a target for scams — a scanned code can lead to a phishing site or a malicious download just as easily as a legitimate one. The code itself isn't inherently dangerous; the risk is in blindly opening whatever it points to without checking first.

A simple safety habit

Use a scanner that shows you exactly what a code contains — a full URL, plain text, Wi-Fi details — before taking any action like opening a link or connecting to a network. That one extra second of reading before tapping "open" is the single most effective protection against QR-based scams.

Scan any QR code and preview exactly what it contains before opening it, with QR Code Scanner →