TrustScan
QR scanner · QR generator · link safety

Scan a QR code.
Know where it actually goes.

A QR code is just a picture of a link. TrustScan reads it, runs 21 checks on the address, and tells you what it found — before the page opens. Free QR code generator included, right here in your browser.

Free forever · No account · Works offline · Android and iOS

Free QR code generator

Make a QR code without handing over your data

Most online QR code generators log what you create, and some quietly route your code through their own redirect so they can switch the destination later. This one runs entirely in your browser. Close the tab and there is nothing left to log.

Every code type

Website links, plain text, Wi-Fi logins, vCard business cards, email, SMS, phone, WhatsApp, location and calendar events.

PNG and SVG

Download a high-resolution PNG for screens, or an SVG that stays sharp on a banner, a menu or a shop window at any size.

Static and permanent

Your code holds the real destination, not a tracking redirect. It cannot expire, be repointed, or stop working because a service shut down.

Create a QR code

Why scanning needs checking

QR code scams work because nobody can read a QR code

Criminals stick their own code over the real one on a parking meter, a restaurant table or a delivery notice. You scan, a login page opens, and it looks exactly right. The technique has a name now — quishing — and the only defence is reading the address before the page loads. That is what a QR code scanner should do, and almost none of them do it.

  • 01 Code-executing schemes like javascript: and data:
  • 02 Insecure HTTP, where anything you send can be read
  • 03 A bare IP address in place of a domain name
  • 04 Addresses obfuscated as hexadecimal or octal numbers
  • 05 Punycode domains that render as familiar words
  • 06 One word mixing two alphabets — the homograph attack
  • 07 Domains written in a non-Latin alphabet
  • 08 ASCII lookalikes: paypa1, g00gle, rnicrosoft
  • 09 The "@" trick, which hides the real destination
  • 10 Link shorteners masking the true target
  • 11 Throwaway domain endings favoured by scammers
  • 12 Urgent login wording built into the domain
  • 13 Unusually deep subdomain chains
  • 14 Connections on a non-standard port
  • 15 A famous brand outside its own registrable domain
  • 16 Links ending in an executable file
  • 17 Executables hidden in query parameters
  • 18 Open redirects carrying a second address
  • 19 Paths asking for passwords, OTPs or recovery phrases
  • 20 Unusually long addresses that bury the destination

How each check works

The app

A QR code scanner and barcode reader that respects you

Scanning stays free

Scanning, all 21 safety checks, history, search and every code type you can create — free, permanently. The safety engine is the product, not the upsell.

Works offline

The checks run on your phone. No link you scan is sent to a server to be rated, so nobody builds a profile from what you point your camera at.

Reads every format

QR codes plus EAN, UPC, Code 128, Code 39, ITF, PDF417, Aztec and Data Matrix — a barcode scanner and a QR reader in one.

14 languages

English, Chinese, Hindi, Spanish, Arabic, French, Bengali, Portuguese, Russian, Urdu, Indonesian, German, Japanese and Turkish.

Scan sessions

Named runs for stock counts and event check-in. Repeats fold into a quantity, or get flagged — whichever your job needs.

Bulk generate

Turn a CSV into hundreds of codes at once, exported as a zip — table numbers, asset tags, ticket batches.

Questions

QR codes, answered plainly

Is this QR code generator really free?

Yes, and there is no account, watermark, scan limit or expiry. The generator runs in your browser using your own device, so it costs us nothing to let you use it.

How do I know if a QR code is safe to scan?

You cannot tell by looking — that is the whole problem. Use a scanner that shows you the address and checks it before opening. Paste any link into the checker at the top of this page to see the kind of findings TrustScan reports on your phone.

What is the difference between a static and a dynamic QR code?

A static code contains the destination itself and works forever. A dynamic code contains a link to someone else's server, which then forwards you — so it can be edited later, but it can also be repointed, tracked, or switched off when that company disappears. Every code made here is static.

Can I make a Wi-Fi QR code for guests?

Yes. Choose Wi-Fi in the generator, enter the network name, password and security type, and print the result. Guests point a camera at it and join without you reading a password out loud.

Can I create a QR code for my business card?

Choose Contact card. It produces a vCard containing your name, company, phone, email, website and address, which saves straight into the phone's contacts app when scanned.

Do QR codes expire?

Static ones do not. A printed QR code from this site will still work in ten years, because the information is in the pattern itself rather than on a server that has to stay online.

Can I put a logo in the middle of a QR code?

Yes — free, right here in the browser. Use the logo generator, set error correction to Highest, and keep the logo clear of the three corner squares. The app does it too, with a 2,400 px export.

Does the app work without an internet connection?

Yes. Scanning, generating and all 21 safety checks work with no connection at all, because none of it depends on a server.

Scan with something that checks first

Free forever, no account, and every safety check included. Generate codes here, scan them safely on your phone.