Turn any link, text or contact detail into a crisp QR code and download it as a PNG. Everything runs in your browser, nothing is uploaded.
QR codes hide their destination behind an image, which is exactly what makes them useful to attackers too.
A person cannot tell a legitimate code from a malicious one by looking at it. "Quishing" — QR phishing — relies on exactly that. Print your codes yourself, and check that stickers have not been placed over them.
A QR code holds plenty of characters, so there is rarely a reason to shorten a URL inside one. Using your own domain means a phone can preview a destination people recognise before they tap it.
The code is drawn in your browser. The text you enter is never uploaded, which matters if you are encoding anything internal — a staff portal, an event link, or a document reference.
See whether a password has appeared in a public data breach. Also free, also entirely in your browser.
Password breach check See all tools