What Is a QR Code and How Does It Work? (Plain-Language Guide)

The 30-second answer

A QR (Quick Response) code is a two-dimensional barcode: a grid of black and white squares that encodes text — usually a link, but equally a UPI payment instruction, WiFi credentials or a contact card. Your phone's camera reads the grid, decodes the text, and acts on it. Invented in 1994 by Denso Wave for tracking car parts, it conquered India three decades later on the back of UPI.

How the squares store data

Each small square (a 'module') is a bit — dark or light. The three big corner squares are finder patterns that tell the camera where the code is and which way is up, which is why a QR scans at any angle. Timing lines and alignment patterns handle perspective and curvature; everything else is data plus error-correction bits.

Capacity grows with grid size: from 21×21 modules (~25 characters) to 177×177 (~4,000 characters). More content = denser code = needs a bigger print — the reason short dynamic links scan better than long URLs.

Error correction: why damaged codes still scan

QR codes carry redundant data using Reed–Solomon codes, at four levels — L (7% recoverable) to H (30%). That's how a scratched, smudged or logo-covered code still works: the reader reconstructs the missing modules mathematically. Branded QRs with centre logos deliberately 'spend' this budget, which is why good generators switch to level H when you add a logo.

Static vs dynamic — the distinction that matters

A static QR encodes the content itself: the full URL, the WiFi password, the UPI string. It works forever and offline, but can never change. A dynamic QR encodes a short link that redirects to your content — the printed pattern stays identical while you change the destination, and every scan is countable. Rule of thumb: information that never changes → static; anything printed at scale or worth measuring → dynamic. Our dynamic-vs-static guide goes deeper.

Are QR codes safe?

The code itself is just text — the risk is where it points, exactly like any link. Check the payee name before confirming UPI payments, read URLs after scanning, and remember receiving money never needs your PIN. Our QR scam safety guide covers the three frauds common in India and their simple defences.