What is qr-codes.io?

qr-codes.io is the short link domain of The QR Code Generator (TQRCG). All the QR Codes generated with TQRCG contain the qr-codes.io link, which when scanned redirects to wherever the link has been redirected by its owner. qr-codes.io is managed by Uniqode, the company behind TQRCG.

Person scanning a package barcode with a phone

How a QR Code scan resolves

Scanning a QR Code and landing on a website feels instant, but a few distinct steps happen in that fraction of a second.

A shortened link, not a destination

The QR Code does not contain the destination information. It contains a shortened URL. QR Codes are made up of an array of black and white boxes that contain text, and in the case of dynamic codes, the text will be the qr-codes.io address, and not the destination URL. This is the distinction between dynamic and static codes. In static codes, the destination URL is encoded directly and forever; there is no layer in between. In dynamic codes, a link to the destination URL is encoded.

Read locally first

Your device reads the pattern before it ever contacts a server. The QR Code pattern is decoded by your camera or scanning app without being sent anywhere. It's just like decoding any QR Code locally. All your phone understands is a qr-codes.io shortened address which is then opened as any other link.

Looked up and resolved

The short link is looked up, checked, and resolved. Once your device requests that address, our system looks up which destination it currently points to, confirms the code is active, and sends your device onward. This lookup is what makes a dynamic QR Code dynamic: the destination it resolves to isn't fixed at print time, it's fixed at the moment of the scan, using whatever the owner has most recently set.

Arrives, and stays reusable

You arrive at the real destination, and the code stays reusable. The forward happens in well under a second, and from your side it looks like a single smooth jump from scan to page. Because the destination is looked up fresh on every scan, the QR Code's owner can change it entirely, as many times as they want, without the printed code ever needing to change.

Why QR Codes use a short link at all

It would be simpler, on paper, for a QR Code to encode a destination directly. Most don't, for a few concrete reasons.

A short link can be edited. A printed code can't.

A printed QR Code can't be edited. A short link can. Once a QR Code is printed on a menu, a poster, or packaging, it's fixed. If a business changes its website, corrects a typo, or ends one campaign and starts another, a QR Code that encodes the destination directly is now wrong, permanently, wherever it was printed. A QR Code that encodes a short link only needs the link's destination updated once, and every printed copy, no matter how many, picks up the change instantly.

Shorter text means a simpler pattern.

Shorter encoded text means a simpler, more reliable pattern. A QR Code's visual complexity is a direct function of how much text it encodes. A full destination URL, especially one with tracking parameters or a long path, produces a denser pattern with more small modules packed into the same space. A short link produces a simpler pattern that stays readable at smaller sizes and holds up better to printing at low resolution, on curved surfaces, or in low contrast.

A short link makes a scan countable.

Routing through a short link is what makes a scan countable. If a code encodes a destination directly, there's no reliable way to know it was scanned, since the scan never touches anything the owner controls. Routing through a short link means every scan can be counted, which is how an owner running the same design across ten different posters can tell which location or placement is actually getting scanned.

Not locked to one destination.

A QR Code isn't locked to one destination forever. Businesses rebrand, campaigns end, websites get restructured. A QR Code that points directly to a destination can't adapt to any of that. But a QR Code routed through a short link can point to something entirely new at any time, without anyone needing to reprint or redesign what's already out in the world.

Recognizing a legitimate short-link domain

Short-link domains exist across the web for reasons beyond QR Codes, and not all of them are run responsibly, so it's worth knowing what to look for.

A legitimate short-link domain will generally:

Transparent

Be transparent about what it is. If a domain's only content is redirects with nothing explaining what it does or who operates it, that's a reasonable reason to be cautious.

Shows the domain

Shows you the domain before it forwards you. Your browser or camera preview should show the short-link address itself, not silently jump somewhere else without ever displaying it.

Consistent

Behave consistently. A legitimate short link resolves to the same kind of destination its context suggests. A restaurant's menu QR Code should link to the menu, not to an unrelated page.

Reportable

Give you a way to report something that looks wrong. Scan pages that offer no way to flag a deceptive destination are harder to hold accountable.

qr-codes.io exists specifically to serve QR Codes created through The QR Code Generator, and every scan routed through it is checked against the destination configured by its creator.

Scanning QR Codes safely

A little awareness goes a long way, whether or not anything has ever gone wrong for you.

  • Look at what the preview shows before you tap through. Most phone cameras display the encoded link before opening it. Get in the habit of glancing at it.
  • Be wary of a sticker placed over another QR Code. This is a known tactic in public places like parking meters and payment terminals, where a fake code is pasted directly over a legitimate one.
  • Treat a scanned page like any unfamiliar link. Don't enter a password or payment details on a page you reached by scanning unless you're confident in who operates it.
  • Keep your phone's browser and operating system up to date. Most built-in protection against malicious links and pages lives at that level, not in the QR Code itself.
  • Use the Report option if something looks wrong, rather than continuing or entering information anyway.
Couple sitting on a sofa looking at a tablet together

Frequently asked questions

Dynamic QR Codes are designed to route via a short link rather than to a fixed destination, so the destination can be changed later without reprinting the code. qr-codes.io is the short-link domain that routing uses.
qr-codes.io only forwards scans to the destination configured by each QR Code's creator, and every scan is checked before forwarding. As with any link, it's still worth applying normal caution to whatever destination you land on.
Yes. Any dynamic QR Code created with The QR Code Generator uses a qr-codes.io short link automatically.
Scan activity, such as the time and general location of a scan, is recorded so the code's owner can see how their code is performing. Our privacy policy explains what's collected and how it's used.
Because the scan first resolves through qr-codes.io before forwarding, your browser briefly shows this domain before landing on the real destination.
Some scanning apps show the encoded link, including qr-codes.io addresses, before opening it. Checking that preview is one of the more reliable ways to catch something suspicious before it loads.