Privacy-focused
secure QR code generator

Generate a URL, text, email, or vCard QR code entirely in your browser. No ads, no tracking, and nothing you encode is ever sent to a server.

How the secure QR code generator works

1

Choose a type and enter your data

Pick URL, Text, Email, or vCard and fill in what you want encoded, then select Generate QR code.

2

The QR is drawn in your browser

The code is rendered into a <canvas> element using your browser's own JavaScript. Nothing you typed is sent to a server to make this happen.

3

Download or scan it

Download the code as an image or scan it straight off the screen with a phone camera. Nothing about it is kept once you leave the page.

Private by design: nothing leaves your browser

Sometimes you worry about a platform holding on to your QR code. Maybe it points to a sensitive URL, or to a form or survey for research, and you would rather not have that destination logged anywhere but here. If that describes what you are encoding, a standard QR generator that round-trips your data through a server is not a good fit:

01

100% client-side

The code is generated in a <canvas> element on your device. Generating it fires no network request, which you can confirm in your browser's network tab.

02

Nothing stored or logged

There is no account and no history. We do not know what you encoded, and neither does anyone else, unless they scan the code themselves.

03

Works offline

Once the page has loaded you can disconnect from the internet and keep generating and downloading codes. If a server were doing the work, it would stop.

A QR code is not a secret

Anyone who scans it can read what is inside, so keeping the generator private only protects who sees the data before it is scanned. If the content itself is sensitive, encrypt the text before you encode it and paste the ciphertext into the Text tab. If the code points to a file or a page, lock that destination with a long random password so a scan alone is not enough to open it.

Built for developers and security-conscious teams

Anyone who needs a QR code today and would rather not hand the destination to a third-party service to generate it. BlockSurvey takes the same position on research data with zero-knowledge surveys, where responses are encrypted before they ever reach a server.

Sharing sensitive links

Point a code at an internal document, a survey, or a URL you would rather not have logged by a third-party shortener or generator.

Events & business use

Hand out contact details at a conference or storefront with a vCard code, without paying for a SaaS tool just to make one QR code.

Privacy-conscious users

Skip generators that track scans or route the code through their own domain first. What you encode here stays between you and whoever scans it.

Building something that handles sensitive data?

BlockSurvey runs on zero-knowledge surveys, so the responses you collect are never sold or mined. Responses are encrypted on the respondent's device, so the server stores nothing readable.

More free privacy tools

Browse all privacy tools

These tools run in your browser because that is how we build everything. The same idea, applied to research: privacy-first surveys with end-to-end encryption.

Frequently asked questions

Do you collect any information from the QR code generated?

No. We do not collect any information. You are anonymous to the platform. The QR code generation takes place on the browser side and it is known only to you.

What are the permissions needed to scan the QR code on phone?

There is no need for special permissions to scan a QR code. By default, all modern phones support the scanning of QR codes from the camera. We advise not to use a third-party QR code app when it is already available with the default camera on phone.

What are the privacy issues surrounding QR codes?

There are a few potential privacy issues when it comes to QR codes. For example, if a QR code is used to access a website, the website may be able to track the user's IP address. The QR code owner has to communicate the privacy policy on what data is being tracked and what is not.

How to make QR code secure?

There is no foolproof method, since anyone who scans the code can read what it points to. What actually helps: print it on tamper-resistant material such as a holographic label so a swapped code is visible, and lock down the destination itself with authentication or a long random password rather than relying on the code.

What are some tips to secure the QR code?

Store the file somewhere access-controlled rather than a public folder, and if you print it, use tamper-resistant material such as holographic labels so a swapped-out code is easy to spot. If the destination is sensitive, protect that page or file directly instead of trying to make the QR code itself the security boundary.

How can I track the number of scans for my QR code?

A QR code tracking service, free or paid, works by routing the code through their own domain first so they can log each scan before redirecting you. That is a dynamic QR code by definition, which this tool does not do, and it also means the tracking service now sees who scanned it and when.

What is a dynamic QR code? Do you support it.

A dynamic QR code encodes a short redirect URL rather than the destination itself, so the operator can repoint it to somewhere new later without reprinting the code. BlockSurvey does not support this. Every QR code you generate here encodes your data directly, with no redirect in between.

Are dynamic QR codes more secure than static QR codes?

No, dynamic QR codes are not more secure than static QR codes. In fact, they may be less secure, as it is possible to change the destination URL without the user knowing.

How is this different from a paid QR code generator?

The QR code itself is not different, because the QR standard is open and any generator that follows it produces a functionally identical code. The difference is where the code gets made. Most free and paid QR tools generate it server-side, and some track scans or route the code through their own domain first, which is exactly what a dynamic QR code does, a feature this tool intentionally does not support (see "What is a dynamic QR code? Do you support it." above). This generator draws the QR directly in your browser, so there is no redirect, no scan tracking, and no sign-up.

Can I use this offline?

Yes. Once the page has finished loading, generating and downloading QR codes keeps working without an internet connection, because the whole process runs on your device.
Scripts are blocked. This site won’t work properly. If you’re using Brave, click the Shields icon and turn off Block scripts. Otherwise disable your ad blocker for this site.