LocateKit

Safety

Are QR codes safe to scan?

A code is an envelope, not a verdict. Ten seconds of checking beats ten minutes of account recovery.

Make your own codes instead

Codes you generate yourself carry payloads you reviewed. No redirect, no tracking, no surprises.

Open the generator

The ten-second check

Read the preview, then decide. Phone cameras show where a code wants to go before opening anything: a domain, an action, a join request. If the preview does not match the claimed sender, stop. A bank never needs you to log in through a sticker on a lamppost.

  • Inspect the domain. Misspellings, odd subdomains, and URL shorteners hiding the destination are the classic tells.
  • Do not log in on the spot. A scanned link that demands credentials immediately deserves a typed address instead.
  • Treat payments as guilty until proven innocent. A code asking for money, gift cards, or crypto is almost never legitimate street furniture.

The exposure runs both ways

Scanning is only half the story. Printing a code publishes its payload to every camera in the room, so a Wi-Fi code on the wall is a password on the wall. Print guest networks, rotate them, and never post code photos online. The same physics protects codes you make: what you encode is exactly what scanners get, with nothing added.

Keep reading

Related QR guides

Main tool

QR code generator

All eight content types with verified downloads.

Validity

Do QR codes expire?

Static codes carry no expiry.

Guests and rentals

Wi-Fi QR code for guests

Guest networks limit exposure.

Networking

vCard QR code for a business card

Only print details you would hand out.

Questions and answers

Safety questions

Are QR codes safe to scan?
The pattern itself only stores text. The risk is the content: a malicious link, a harvesting login page, or a network join. Check what the code wants to do before approving it.
How do I check a code before opening it?
Point the camera and read the preview without tapping through. Confirm the domain matches the claimed sender, watch for misspellings and odd subdomains, and never enter credentials from a scanned link on the spot.
Can a QR code install malware?
Scanning alone does not install anything on current iOS and Android. The danger is the page or file it leads to, which can phish credentials or trick you into installing something yourself.
Is it safe to scan a Wi-Fi code?
Joining is safe in the sense that the code only carries a network name and password. The exposure runs the other way: printing your code lets anyone recover the password, so use a guest network.