What Is a QR Code and How Does It Work?
A QR code (Quick Response code) is a two-dimensional barcode that stores data — typically a URL, text, contact information, or WiFi credentials — encoded in a grid of black-and-white squares. Invented by Denso Wave in 1994 for automotive manufacturing, QR codes became ubiquitous in the smartphone era because they can be scanned by any camera and decoded in under a second. WikiPlus QR Scanner at wikiplus.co decodes QR codes from images or live camera — free, private, and instant.
How QR Code Encoding Works
A QR code stores data in a matrix of black and white squares arranged in a square grid. The grid size ranges from 21×21 modules (Version 1) to 177×177 modules (Version 40), with larger versions storing more data. The data is encoded in binary using one of four modes: numeric (digits only, highest density), alphanumeric (letters, numbers, and a few symbols), byte (any 8-bit data including special characters), and kanji (Japanese characters). The encoded data is combined with Reed-Solomon error correction codes, which allow the QR code to be decoded even if up to 30% of it is damaged or obscured. Three large square 'finder patterns' in three corners of the code allow scanners to detect and orient the code at any angle. Smaller 'alignment patterns' in larger versions correct for perspective distortion when the code is photographed at an angle.
What Data Can a QR Code Store?
QR codes can store any data that fits within their capacity limits. Version 40 QR codes (177×177 modules, the largest standard size) store up to 7,089 numeric characters, 4,296 alphanumeric characters, 2,953 bytes of binary data, or 1,817 kanji characters. In practice, QR codes used for consumer applications store far less: a typical URL is 30–80 characters, well within any QR version. Common QR code contents include: URLs (linking to websites, menus, payment pages), plain text (short messages, product codes), vCard contact information, WiFi network credentials (SSID + password), geographic coordinates, calendar events, email addresses, phone numbers, and cryptocurrency payment addresses. The content type determines how a scanner application interprets and presents the decoded data — WikiPlus QR Scanner identifies the content type automatically.
QR Code Error Correction: Why Damaged Codes Still Scan
QR codes include Reed-Solomon error correction data that allows them to decode correctly even when partially damaged. Four error correction levels provide different trade-offs between data capacity and damage tolerance: Level L (Low) tolerates up to 7% damage — maximum capacity. Level M (Medium) tolerates up to 15% damage — default for most applications. Level Q (Quartile) tolerates up to 25% damage — used when moderate physical damage is expected. Level H (High) tolerates up to 30% damage — used for logos or high-wear applications. This is why QR codes with a logo overlaid on the center still scan — the overlaid logo effectively 'damages' up to 30% of the modules, which the error correction algorithm recovers. WikiPlus QR Scanner applies Reed-Solomon error correction when decoding, which means it can successfully decode partially obscured or photo-damaged QR codes that other scanners reject.
QR Code Security: Risks and How to Protect Yourself
QR codes themselves are not inherently dangerous — they are just data containers. The risk lies in what they encode and what you do with that data. Three main attack vectors: (1) Phishing URLs: a QR code that appears legitimate but encodes a URL to a spoofed website. Always read the decoded URL before clicking — WikiPlus QR Scanner shows you the full URL before you follow it. (2) Malicious deep links: a QR code that encodes an app:// URL that triggers an action in a vulnerable app (payment initiation, authentication bypass). Be cautious with QR codes from unknown sources that open apps. (3) WiFi credential harvesting: a QR code that encodes WiFi credentials for a malicious hotspot. Always verify the network name matches the location before connecting. WikiPlus QR Scanner's preview step — showing decoded content before any action — is your first line of defense.
Frequently Asked Questions
- What is a QR code used for?
- QR codes are used to conveniently link physical objects to digital content. Common applications: restaurant menus (QR code on the table links to the menu website), contactless payments (QR code encodes a payment address), event ticketing (QR code contains the ticket validation data), product traceability (QR code links to manufacturing origin data), WiFi sharing (QR code encodes network name and password), business card sharing (QR code contains vCard contact information), authentication (2FA apps use QR codes to set up authenticator accounts), and marketing campaigns (QR codes on packaging link to product pages or promotions).
- How much data can a QR code hold?
- A standard QR code (Version 40, the largest) can hold up to 7,089 numeric characters, 4,296 alphanumeric characters (letters + numbers), or 2,953 bytes of binary data. In practice, most QR codes store much less: a typical URL is 30–100 characters, a WiFi password is 8–32 characters, and a vCard contact is 200–500 characters. Larger data payloads require larger QR code images, which can become difficult to scan at small print sizes. For data over 1,000 bytes, generating the QR code at a large size (at least 2×2 inches for print) ensures reliable scanning.
- Can a QR code contain a virus?
- A QR code itself cannot contain a virus — it is simply data. However, a QR code can encode a URL that leads to a malicious website, or a deep link that exploits a vulnerability in an app. The danger is not the QR code scan itself but what you do after seeing the decoded content. WikiPlus QR Scanner at wikiplus.co shows you the decoded content (URL, text, etc.) before you take any action — this preview step lets you verify a URL looks legitimate before clicking it. Never follow QR code links to pages that ask for login credentials unless you can verify the domain matches the legitimate service.