How to Create a QR Code: The Complete Guide (2026)

QR codes are scanned over a billion times a year worldwide. Every modern iPhone and Android phone reads them natively through the camera app — no special app needed. Creating one takes less than a minute.

This guide covers every method (online generators, Chrome, iPhone, Android, Canva, Google Sheets), every decision (static vs dynamic, which QR type, error correction levels), and every technical detail — including print specifications, sizing formulas, security risks, and the 8 most common failure modes.

Quick steps: create a QR code in 60 seconds

That’s it for a free static QR code. If you need to edit the destination after printing, track scans, or upload files like PDFs — you need a código QR dinâmico, which requires a plan. Plans start at $7/month billed annually, or grab a negócio vitalício a partir de $197 para acesso permanente.

How QR codes actually work

Understanding the mechanics helps you make better decisions about sizing, customization, and which type to use. Skip this if you just need to make one — but bookmark it for when a code breaks and you need to diagnose why.

A QR code is a two-dimensional matrix of black and white squares called modules. Each module represents a single bit of data. A small QR code (Version 1, 21×21 modules) encodes about 17 characters. A large one (Version 40, 177×177 modules) can hold several thousand characters. There are 40 versions total — each adds 4 modules per side.

Not every module stores your data. The three large squares in the corners (finder patterns) tell the scanner where the code is and how it’s oriented. Alternating black-and-white strips (timing patterns) help calculate module size. Additional squares in larger codes (alignment patterns) correct for camera angle distortion. Format information stores the error correction level and masking pattern.

The actual data is encoded in one of four modes: numeric (0-9, most efficient), alphanumeric (0-9, A-Z, some symbols), byte (any ASCII character), or kanji. After encoding, the data goes through a Reed-Solomon error correction algorithm — the same math used in CDs, DVDs, and satellite communications — that generates redundant backup data. Both the original data and the redundancy are interleaved and spread across the code.

Error correction levels: L, M, Q, H

This is why QR codes still scan when they’re scratched, dirty, or have a logo covering the center:

When you add a logo to the center of a QR code, you’re physically covering modules — making them unreadable. A typical center logo covers 10-20% of the module area. At Level H (30% recovery), the code has enough redundancy to reconstruct the covered data. At Level M (15%), a logo may work in a lab but fail in the real world where scratches and fading pile on. Most generators (including Pageloot) automatically switch to Level H when you upload a logo.

QR codes vs barcodes

Traditional barcodes (UPC, EAN) are one-dimensional — they store data in a single line of varying-width bars, typically encoding 8-13 digits. QR codes are two-dimensional — they store data in a grid, encoding up to 4,296 alphanumeric characters. Barcodes require a laser scanner; QR codes work with any smartphone camera. For product identification at checkout, barcodes are fine. For anything involving consumer interaction — marketing, menus, contact sharing, file access — QR codes are the standard.

Static vs dynamic: the decision that changes everything

This is the single most important decision when creating a QR code. Get it wrong and you’ll either pay for something you don’t need — or end up reprinting materials because you can’t change a baked-in URL.

When to use static

Use static when the destination will never change: a business website URL, a Wi-Fi password, a fixed email address, contact details on a vCard, or a one-time event where you won’t need analytics. Static codes are free and independent — they work even if the generator disappears tomorrow.

When to use dynamic

Use dynamic when: you might need to change where the code points after printing, you want scan analytics (when, where, what device), you’re linking to files (PDF, image, audio) that might be updated, you’re running a time-limited campaign, or you’re managing codes for clients who need scan reports.

The provider lock-in reality

Dynamic QR codes have a catch most guides don’t mention: your codes are permanently tied to the provider’s servers. The redirect URL baked into the QR pattern can never be changed — it’s physically encoded in the printed code. If you switch providers, every printed material needs a new code. This means billing practices, refund policies, and long-term viability matter more than for most SaaS tools. A acordo vitalício eliminates this risk by guaranteeing permanent access at a fixed one-time price.

Method 1: Online QR code generator (most flexible)

Online generators are the most flexible — they support multiple QR types, customization, logo uploads, and (for dynamic codes) editing and tracking. Pageloot’s generator works on any device with no install.

Create a free static QR code

Crie um código QR dinâmico

Method 2: Create a QR code from Chrome

Chrome has a built-in QR generator — useful for quick, one-off static codes.

Desktop

Right-click any page → “Create QR Code for this page” (or three-dot menu → Cast, Save, and Share → Create QR Code). Downloads as PNG with Chrome dinosaur logo in the center.

iPhone / Android

iPhone: Chrome → Share → Create a QR Code. Android: Chrome → three dots → Share → QR Code.

Method 3: Create a QR code on iPhone or Android

iPhone: No prominent native QR generator. Best option: open pageloot.com/qr-code-generator in Safari — works identically to desktop, no app needed.

Android: Chrome’s Share → QR Code flow works. Some Samsung devices include a QR creator in Quick Settings. For full features with dynamic codes, use Pageloot in any mobile browser.

Method 4: Canva, Adobe Express, or Google Sheets

Canva

Inside any design, click Aplicativos → search “QR Code” → paste URL → generate. Code drops into your design. Static only, no tracking. For branded dynamic codes, generate in Pageloot first and upload the SVG to Canva.

Adobe Express

Free QR generator, no account needed for basic codes. Paste URL, customize colors, download as PNG/JPEG/PDF. Static only.

Google Sheets (bulk generation)

For generating many codes at once (product labels, badges, tickets): enter =IMAGE("https://api.qrserver.com/v1/create-qr-code/?data="&ENCODEURL(A2)&"&size=200x200") where A2 is your URL. Drag down for an entire column. Static only, low resolution. For bulk dynamic codes, Pageloot supports CSV upload.

QR code types: which one do you need?

Not sure? Start with URL — it’s the most versatile. For offline use cases (Wi-Fi, contacts), choose the specific type so the phone handles it natively.

How to customize your QR code (without breaking it)

Branded QR codes get up to 80% more scans than generic black-and-white squares. But every customization affects scannability.

Contrast is non-negotiable

Foreground (dots) must be darker than background. Minimum contrast ratio: 4:1. Dark blue or black on white is safest. Don’t invert (white on dark) — fails more often on reflective surfaces and with older phones.

Logo rules

Your logo can cover up to 30% of the center at error correction Level H. Generators switch to Level H automatically when you upload a logo. If scanning fails after adding a logo, it’s too large.

What to avoid

Gradients on dots. Pastel-on-pastel color pairs. Anything covering the three corner squares (finder patterns). Decorative borders that encroach on the quiet zone. Round shapes that crop the code boundary.

Print specifications: sizes, formats, and materials

This section prevents expensive reprints. Every QR code that “doesn’t work” in the real world failed because of a sizing, format, or material problem.

Minimum sizes by material

The 10× rule: a QR code scans from roughly 10× its width. 3 cm code → ~30 cm. 10 cm → ~1 meter. 50 cm billboard → ~5 meters.

File formats

SVG for print — always. Vector, scales infinitely. PNG for digital only. SVG opens directly in Illustrator and InDesign. Minimum PNG: 1000×1000px.

Quiet zone

Blank border around the code — at least 4 módulos de largura on all sides. Without it, scanners can’t find the boundary. Don’t crop it out.

Problem materials

Glossy: glare under lighting — test in actual conditions, prefer matte. Curved: bottles, cups — size up 50%. Transparent: needs opaque background. Dark: needs white background patch. Textured: linen paper, embossed — size up or use smooth label area.

What breaks QR codes (and how to prevent it)

QR codes sustain up to 30% damage at Level H. But real-world failures happen constantly. Here are the 8 most common failure modes.

1. Too small for scanning distance

The #1 failure. A 2 cm code on a poster 2 meters away can’t be resolved by a phone camera. Use the 10× rule.

2. Insufficient contrast

Light gray on white. Yellow on cream. Scanners need minimum 4:1 contrast ratio.

3. URL changed or deleted

Static codes encode URLs permanently. If the URL breaks, the code leads to nothing. Dynamic codes let you redirect anytime.

4. Subscription expired

Dynamic codes route through the provider’s server. Subscription lapses = every printed code dies simultaneously. A acordo vitalício eliminates this risk.

5. Cropped quiet zone

Designer crops the blank border. Scanner can’t find the boundary. Keep 4 modules of space on all sides.

6. Too much data in a static code

More data = more modules = denser, harder-to-scan code. Use a URL shortener or dynamic code for long URLs.

7. Low-resolution for print

200×200px PNG stretched to poster size = blurry module edges. Always SVG for print.

8. Design over finder patterns

The three corner squares are essential for scanning. Don’t place anything over them.

QR code security: quishing and how to stay safe

“Quishing” (QR code phishing) became a mainstream cybersecurity concern in 2025. Attackers place counterfeit QR codes over legitimate ones — on parking meters, restaurant tables, flyers — to redirect scanners to malicious websites. The FBI and multiple national agencies issued public warnings in 2024-2025. Only 39% of consumers can reliably identify a malicious QR code.

If you’re scanning

Check for sticker overlays — physical overlays are the most common attack. Use your phone’s built-in camera (shows URL preview before opening). If the preview URL looks suspicious, don’t tap.

If you’re creating

Use códigos QR de marca with your logo and colors — harder to replicate convincingly. Include a CTA describing where the code leads (“Scan for our menu at restaurant-name.com”). For physical placements, consider tamper-evident materials.

Best practices for placement and scanning

Always include a call to action

“Scan for menu”, “Scan for 20% off”, “Scan to connect on Wi-Fi” — tell people what they get. Pageloot’s generator includes frame templates with customizable CTA text.

Place at natural phone height

Between waist and eye level, angled slightly toward the scanner. Ankle-level and above-head codes get fewer scans.

One code, one destination

Link directly to the specific page, form, or file. Don’t link to your homepage. Fewer taps after scan = higher completion.

Mobile-optimize the destination

100% of scans happen on mobile. Text readable without zooming, tappable buttons, loads in under 3 seconds.

Track with dynamic codes

Static tells you nothing. Dynamic shows scan counts, time, location, device. For any marketing use, dynamic codes are the minimum.

Acessibilidade

Always provide a short URL below the code in readable text. Use colorblind-safe colors (avoid red-green). Blue-on-white and black-on-yellow work for all common forms of color vision deficiency.

What nobody tells you: the real cost of a failed QR code

Most guides treat failures as minor inconveniences. In practice, a broken QR code on printed materials creates cascading costs.

The reprinting math: 500 business cards at $0.10 = $50. 1,000 brochures at $0.50 = $500. 5,000 product labels at $0.05 = $250. If the QR code fails — wrong URL, expired trial, cancelled subscription, bad contrast — the entire run is waste. The code costs $0-7/month. The materials cost 10-100× more.

The trial trap math: QR.io’s “free” trial deactivates codes after 7 days. If you printed 200 business cards ($60) and they die, reactivation is $35/month ($420/year). Year-one cost for “free”: $480. QRFY works the same with a ~$123 minimum reactivation.

Conclusão: the QR generator is the cheapest component. Materials, design time, and distribution are the expensive parts. Spending $7/month (or $197 lifetime) on a reliable generator is the cheapest insurance against wasting hundreds in printed materials.