A 2D barcode a camera scans to open a link or read text.

How much data can a QR code hold?

Up to a few thousand characters, far more than a 1D barcode.

Are QR codes safe to scan?

Usually, but a code can link anywhere, so check the URL before acting, like any link.

What Is a QR Code?

Published 10/10/2025 · 3 min read · Developer tools

Daniel Okonkwo — Front-end developer and tech writer at Allin

Web performance · File formats

Checked against 2 sources

View profile →

In short

A QR code is a two-dimensional barcode — a grid of black and white squares that a camera reads to pull up text, most often a web link. Unlike a striped barcode, it stores data in two directions, so it holds far more (up to a few thousand characters) and can be scanned from any angle. The three big corner squares tell the scanner where the code is and how it's oriented.

A QR code is a 2D barcode a camera reads to open a link or text. Here's what it is, why it holds so much, its anatomy, and a safety note on scanning.

What it is

QR stands for 'Quick Response'. It's a barcode that stores information in a square grid of small black and white cells, called modules. A phone camera or scanner photographs the pattern, decodes the arrangement of light and dark cells back into data — usually a web address, but it could be plain text, contact details or Wi-Fi credentials — and acts on it, most often by offering to open the link.

Why it holds so much

A traditional barcode stores data along one direction — the width of its stripes — so it holds only a handful of digits. A QR code uses the whole square, encoding data both across and down, which multiplies its capacity to as many as a few thousand characters. It also builds in error correction: extra redundant data lets a scanner rebuild the message even if part of the code is dirty, torn or covered by a logo. That resilience is why they work reliably in the messy real world.

The anatomy

Look closely and a QR code has structure. The three large squares in the corners are finder patterns: they let a scanner instantly locate the code and work out its rotation, so it reads from any angle. Smaller alignment squares keep it readable when the surface is curved or the photo is skewed. Around the outside sits a blank margin, the 'quiet zone', that separates the code from surrounding clutter. Everything else is the data itself, plus its error-correction bits.

Common uses and a safety note

QR codes are everywhere: restaurant menus, payment and ticketing, boarding passes, Wi-Fi sharing, product packaging and posters. They're popular because scanning is faster than typing a URL. But that convenience is also the risk — a code is just a link in disguise, and you can't read a web address by looking at a pattern of squares. Treat an unexpected code like an unexpected link: check the URL your phone shows before you tap it, especially for anything involving payment or a login.

QR Code GeneratorCreate a QR code from any text or URL — free.Try the tool →

Frequently asked questions

What is a QR code?: A 2D barcode a camera scans to open a link or read text.
How much data can a QR code hold?: Up to a few thousand characters, far more than a 1D barcode.
Are QR codes safe to scan?: Usually, but a code can link anywhere, so check the URL before acting, like any link.

Articles you may find interesting

All guides →

ExplainerWhat Is a Hash Function? (MD5, SHA-256)A hash function turns any input into a fixed-size fingerprint. Here's what it does, its key properties, common uses, and which algorithms are safe.ExplainerWhat Is a UUID (and When to Use It)?A UUID is a 128-bit identifier that's unique without any central authority. Here's what it looks like, why it's useful, the versions, and when to use one.ExplainerWhat Is a Cron Expression?A cron expression schedules a task to run automatically at set times. Here's what it's for, its five fields, how to read one, and the common gotchas.How-toHow to Create a Strong PasswordLength beats complexity. Here's why a four-word passphrase is strong, why you should never reuse a password, and how a manager makes it effortless.ExplainerWhat Is a JWT (JSON Web Token)?A JWT is a compact, signed token used to carry identity between services. Here's its three parts, how it's used for auth, and its security limits.GuideGenerating an Application Secret Key CorrectlyHow to tell a sound secret-key generator from an unsound one, using this one as a worked example: which random source it calls, how to compute the entropy yourself, and what actually breaks the day you rotate the key.

Sources

Spotted a mistake in this article?