What is a QR Code? Complete Beginner's Guide (2026)
📅 April 2026⏱ 9 min read✍️ ToolLoom Editorial
QR codes are everywhere — restaurant menus, payment screens, product packaging, event tickets, and business cards. But how do they actually store and transmit information? And how do you create one, scan one safely, and avoid the QR scams now sweeping India and the world? This guide covers it all.
QR stands for Quick Response. A QR code is a two-dimensional barcode that stores data as a pattern of black squares arranged on a white grid. Unlike a traditional barcode which only encodes data horizontally, a QR code stores data both horizontally and vertically — allowing it to hold significantly more information.
QR codes were invented in 1994 by Masahiro Hara at Denso Wave in Japan, originally to track automotive parts during manufacturing. They were designed to be scanned quickly — at any angle — which is where the "Quick Response" name comes from.
7,089
Max numeric characters
A single QR code can encode up to 7,089 digits
4,296
Max alphanumeric characters
Letters, numbers, and symbols combined
30%
Error correction
QR codes still scan even when 30% of the image is damaged or covered
26.95B
Global scans in 2024
Up 433% from pre-pandemic levels in 2019
How QR Codes Work
A QR code is made up of several functional regions, each serving a specific purpose:
Finder patterns: The three large squares in three corners. These let the scanner detect the code's location and orientation — allowing scanning from any angle.
Timing pattern: A row and column of alternating black-white squares connecting the finder patterns. This helps the scanner calculate the size of data modules.
Data modules: The main body of the code — the pattern of small black and white squares that encode your actual content.
Error correction data: Built-in redundancy using Reed-Solomon error correction, allowing up to 30% of the code to be obscured or damaged while still scanning correctly. This is why logos can be placed over QR codes.
Quiet zone: The white border around the entire code. Without adequate quiet zone, scanners struggle to detect the edges of the code.
💡
Why URLs in QR codes are often shortened: More data = more modules = denser, harder-to-scan code. A shortened URL (bit.ly, etc.) creates a smaller, cleaner QR code that scans more reliably at small sizes than a long URL would.
How to Scan a QR Code
1
Open your camera app (iOS or Android)
On iPhone (iOS 11+) and most Android phones (Android 8+), the built-in camera app can scan QR codes natively. No separate app needed — just point the camera.
2
Point the camera at the QR code
Hold the camera steady 15–30 cm from the code. You do not need to take a photo — the scanner works in live view. Ensure the entire code is visible within the camera frame.
3
A notification or banner appears
When the code is recognised, a notification or banner appears at the top or bottom of the screen showing the URL or content. Tap it to open.
4
Read the URL before tapping
This is the critical safety step — read the domain in the preview before tapping. A restaurant QR code should go to that restaurant's domain, not a random URL. If the destination looks suspicious, do not proceed.
⚠️
If your camera doesn't scan: Older Android devices may need a dedicated app. Google Lens (built into Google Search) works on any Android. Alternatively, enable QR scanning in your camera settings — on Samsung devices, look for "Scan QR codes" in Camera settings.
How to Create a QR Code
Creating a QR code takes under 30 seconds with ToolLoom's free generator. Here are the most common types you can create:
🔗
URL / Website
Paste any link — your website, social profile, product page, or Google Form. The most common QR code type.
📝
Plain Text
Encode any text — a message, address, contact note, or any information you want to share without a link.
📶
WiFi
Let guests connect to your WiFi instantly by scanning — no password typing. Supports WPA/WPA2/WEP and open networks.
📧
Email / vCard
Encode a pre-filled email or a full contact card (vCard) that saves directly to the scanner's address book.
📍
Location
Encode GPS coordinates or a Google Maps link. Scanning opens the location in the user's default maps app.
💳
UPI Payment
India-specific: encode a UPI payment link so customers can pay by scanning. Widely used by merchants and freelancers.
💡
Download as PNG for print: Always download your QR code as a high-resolution PNG. For print use, request SVG format if available — vector formats scale to any size without quality loss. Never screenshot a QR code for printing — the resolution will be too low.
Static vs Dynamic QR Codes
This is the most important decision when creating a QR code for business use. Getting it wrong after a large print run is expensive and irreversible.
⚡ Static QR Code
Content encoded permanently in the code
Cannot be edited after creation
No scan analytics available
Works forever with no subscription
Completely free — including ToolLoom's generator
Best for: personal use, fixed URLs, WiFi, one-time projects, business cards
🔄 Dynamic QR Code
Encodes a redirect URL (short link)
Destination can be edited anytime after printing
Full scan analytics (location, time, device)
Requires paid subscription to a dynamic QR service
Best for: marketing campaigns, product packaging, large print runs, menus
🚨
Critical for print runs: If you print thousands of labels or brochures with a static QR code and your URL later changes, every printed code is permanently broken. For large or long-term print runs, always use a dynamic QR code service (Bitly, Uniqode, QR Tiger). The subscription cost is far less than reprinting.
Factor
Static QR
Dynamic QR
Cost
Free
Paid subscription (₹500–₹5,000+/month)
Editable after creation
No
Yes
Scan analytics
No
Yes — location, time, device type
Expiry
Never (works forever)
While subscription is active
Best use case
Personal, fixed content
Business, marketing, high-volume print
ToolLoom generator
✅ Supported
Not required for most use cases
What QR Codes Are Used For in 2026
🍽️
Restaurants & Menus
42% of all QR scans globally. Menus, ordering, and payment — eliminating printing costs and enabling real-time updates.
🛒
Retail & Packaging
Product QR codes link to instructional videos, warranty registration, and sustainability data. EU Digital Product Passport regulation mandates them on certain products from 2026.
💳
UPI Payments India
Over 9 million Indian merchants accept QR payments via UPI. The fastest-growing QR use case in India — used by everything from street vendors to luxury retailers.
📶
WiFi Sharing
Cafés, hotels, offices, and Airbnb hosts use WiFi QR codes to let guests connect instantly without sharing passwords.
🎟️
Events & Ticketing
Event tickets, boarding passes, and entry passes — QR codes are now the standard for contactless verification at venues worldwide.
🔐
Authentication
Time-limited QR codes for two-factor authentication, anti-counterfeiting on luxury goods, and secure access passes.
QR Code Safety — Avoiding Quishing Scams in 2026
The growth of QR codes has made them a major target for cybercriminals. The attack is called quishing (QR code phishing) — and it surged fivefold in late 2025. By 2026, QR codes account for 12% of all phishing attacks globally.
How quishing works
Attackers place fake QR sticker over legitimate codes in public spaces — parking meters, restaurant tables, charging stations, and event signs. Scanning the fake code redirects to a phishing site designed to steal credentials or payment details. In email-based quishing, attackers embed malicious QR codes in phishing emails to bypass traditional email security filters that scan text links but not images.
🚨
Real 2026 scam: Fake parking meter QR codes are now widespread in major Indian cities and globally. Attackers place stickers on parking machines redirecting to fake payment sites. Always verify the domain carefully before entering card details after scanning a code on a parking meter or any public equipment.
How to protect yourself
Preview the URL before tapping — read the full domain. paypal-secure.ru is not PayPal. Look for misspellings and unusual domains.
Check for stickers over original codes — if a QR code looks placed over another code, do not scan it. Run your finger over it to feel if it is a sticker.
Be sceptical of QR codes in unexpected emails — this is now a primary phishing delivery method. Legitimate banks and government departments rarely send QR codes via email.
Verify the domain matches the location — a restaurant's QR menu should go to that restaurant's domain, not a generic link shortener.
Never enter payment details after scanning without verifying — legitimate UPI QR codes show the merchant's registered name in your UPI app before you confirm payment.
Printing Tips for Reliable Scanning
The minimum size of a QR code for reliable scanning depends on how far away the scanner will be:
Print Medium
Scanning Distance
Minimum QR Size
Business cards
10 – 15 cm
2 × 2 cm
Flyers and leaflets
~30 cm
3 × 3 cm
A4 posters
~1 metre
8 × 8 cm
Outdoor signage / banners
2+ metres
20 × 20 cm
Billboards
5+ metres
50 × 50 cm or larger
Use dark modules on a white background — this outperforms coloured variants by 35% in scan success rate.
Never invert colours — white modules on a dark background confuse most scanners. Stick to black on white.
Keep the quiet zone intact — the white border around the code must be at least 4 modules wide. Cropping it causes scan failures.
Download as SVG for print — SVG scales to any size without quality loss. PNG at 300 DPI minimum if SVG is unavailable.
Always test-scan at the actual print size — print one test copy and scan it before committing to a mass print run.
Logos in the centre reduce scan reliability — keep logo overlays to 15–20% of the code area maximum (within the error correction limit).
📱 Create Your QR Code Instantly — Free
ToolLoom's QR code generator works in your browser. URL, text, WiFi, UPI — no signup, no limits, download as PNG instantly.
QR stands for Quick Response. The name refers to the code's ability to be decoded quickly — at any angle and without precise alignment — unlike traditional barcodes. QR codes were invented in 1994 by Masahiro Hara at Denso Wave in Japan, originally for tracking automotive parts in vehicle manufacturing.
On iPhone (iOS 11 and later) and most Android phones (Android 8 and later), simply open your camera app and point it at the QR code — no additional app is required. A notification or banner will appear with the link or content. Tap it to open. If your camera doesn't scan automatically, try Google Lens, which is available on all Android devices and works reliably for all QR types.
A static QR code permanently encodes its content — once created, it cannot be changed. It works forever, requires no subscription, and is completely free. A dynamic QR code encodes a redirect URL; the destination can be changed anytime after printing, and provides scan analytics. Dynamic codes require a paid subscription. For personal and small-business use, static QR codes (like those from ToolLoom) are usually sufficient. Use dynamic codes for large print runs where the destination might change.
Yes — "quishing" (QR phishing) is a growing threat. Attackers place fake QR code stickers over legitimate ones in public spaces, redirecting scanners to phishing websites. Always preview the URL before tapping after scanning. Check for physical stickers placed over original codes. Be especially cautious with QR codes on parking meters, restaurant tables in tourist areas, and any QR code received in an unexpected email.
A QR code can store up to 7,089 numeric characters, 4,296 alphanumeric characters, or 2,953 bytes of binary data. In practice, most QR codes for URLs contain 40–200 characters — well within the limit. The more data you encode, the denser and smaller each module becomes, which can reduce scan reliability at small print sizes. This is why URL shorteners are commonly used in QR codes intended for print.
Use ToolLoom's free QR code generator — select the WiFi type, enter your network name (SSID), password, and encryption type (WPA2 is most common), then generate and download. Scanning the code will prompt the phone to connect to that network automatically, without the user having to type the password. This works on both iPhone and Android. Place the printed code at your reception, café counter, or Airbnb check-in card.
The minimum depends on scanning distance. For business cards (scanned at 10–15 cm), 2 × 2 cm is the minimum. For flyers (scanned at 30 cm), use at least 3 × 3 cm. For A4 posters (scanned at 1 metre), 8 × 8 cm. For outdoor signage (scanned at 2+ metres), 20 × 20 cm minimum. Always download as SVG or high-resolution PNG (300 DPI minimum) for print use, and test-scan a printed copy before committing to a large print run.