How do I create a password protected QR code?

It happens in two stages, because the password lives on the code's destination rather than on the image. First build the code as a dynamic type — a link, a hosted file, a PDF, or a vCard — and save it to your QRKit account. Then open that saved code in your dashboard, pick the Password action, and set one. From then on every scan meets the prompt before the destination loads. Building, designing, and saving the code does not need a paid plan; setting the password does, from the Plus plan up.

Can I make a QR code that requires a password?

Yes, on any dynamic code. What the person scanning gets is a prompt on the QRKit redirect page: they type the password, it is checked against the stored value, and only then does your link, file, or page load. You can save an optional hint alongside it, which sits behind a “Show hint” link on that prompt and helps when a group shares one password. Requiring a password is a Plus-plan feature and up.

How do I lock my QR code?

It is worth being precise about what locking covers. The lock sits on the destination, not on the printed square, so anyone can still scan the code and reach the prompt — what they cannot do is get past it without the password. That is also why a code you built in Static QR mode cannot be locked at all: its content sits inside the pattern and the phone reads it with no server in between, so there is no moment at which a prompt could appear. SMS and calendar-event codes only come in that mode. Wi-Fi, plain text, and email let you choose in the builder, so switch them to Dynamic QR — or use a link, file, or vCard code, which are dynamic anyway — and then set the password from your dashboard on Plus or above.

How do I set a password on a QR code?

Find the code in your dashboard list, open the Password action, type the password, add a hint if you want one, and save. Nothing has to be reissued — the change takes effect on the next scan of the code you already handed out. The same dialog is where you later replace the password, edit the hint, or remove protection completely. It is available from the Plus plan up.

Is a password protected QR code the same as an encrypted one?

No, and neither one scrambles the printed pattern. A password is an access check: when you set one, QRKit saves a bcrypt hash of it and checks what the scanner types against that hash rather than against a stored copy of the password. Encryption is about the data in transit, and every QRKit redirect runs over HTTPS whether or not you add a password. So the encrypted-in-transit part is already handled for you; the password is what decides who gets in.

Can I change the QR code password after I print it?

Yes, as often as you like, and the printed code itself never changes. One thing to expect: because the password is stored hashed, it cannot be read back to you, so the field opens empty and you either type a new password to replace the old one or remove protection. Replacing it is the usual way to cut off an old group once the same printed code has moved on to a new one.

Is a password protected QR code free?

Building, customising, and previewing a QR code costs nothing, and downloading the image needs a free account rather than a paid one. The password itself starts on Plus, from $16 a month billed annually, shown in your local currency on the pricing page. Two things worth knowing about the free plan while you try it: it covers one dynamic QR code and 100 scans a month across the whole account, and past that the code stops redirecting until the count resets the following month. Paid plans have no scan cap.

How do I create secure QR codes for sensitive documents?

Upload the document as a hosted file code, save it, set a password on it, and pass the password along a separate channel — never printed next to the code. Anyone who scans reaches the prompt rather than the document. Two practical things to plan around: the Plus plan you need for passwords carries a 20 MB file ceiling, and when a document should stop circulating you have three ways to cut access off without touching what you printed. Replace the password, so the one that went around no longer works. Give the code an expiry — the same Plus plan lets you set a cut-off date and time, or a cap on unique scans, after which anyone scanning sees a short message you write instead of the file. Or delete the code, which is the permanent version of the same thing.

Can I password protect a Wi-Fi QR code?

Only if you build it as a dynamic Wi-Fi code. Left on Static, the network name and its password sit inside the printed pattern and the phone reads them with no server in between, so there is nowhere for a prompt to sit. Switch the builder to Dynamic and the scan opens a QRKit-hosted page showing the network details instead — that page takes a password like any other dynamic code, from Plus up, so the prompt comes first and the credentials only after. Worth separating two things that share a name: the password field in the Wi-Fi builder is the network's own password, not an access check on the code.

Get Started Free

Password Protected QR Code Generator

Add a password to your QR code so only the right people can open the link, file, or page behind it. Works for documents, links, vCards, and more.

Add a password to your QR code so only the right people can open the link, file, or page behind it. It works for links, PDFs, hosted files, vCards, and more. Every redirect runs over HTTPS, and you can change the password or set an expiry anytime from your computer, without reprinting — or delete the code outright. Password protection and expiry are on the Plus plan and up.

Password ProtectionHTTPS EncryptedDynamic QR CodesScan Analytics

Password protection is on the Plus plan and up, from $16/month billed annually. Design your QR code below for free, then add a password from your account.

STEP 1Enter the URL

STEP 2Customize Design

This is a sample until you generate yours

Classic

Bubble

Smooth

Sharp

Elegant

Dots

Pattern

Classic

Bubble

Smooth

Sharp

Elegant

Dots

Eyes

Classic

Circle

Bubble

Smooth

Elegant

Dotted

STEP 3Download your QR code

This is a sample until you generate yours

Can't be edited after download

Runs in your browser. Nothing to install.

What it is

What Is a Password-Protected QR Code?

A QR code with password protection, also called a password protected QR code, is a QR code that asks for a password before it opens. Scan it, enter the password, and only then does the link, file, or page appear. It is a simple way to put something private on a physical item (a sign, a packet, a door, a piece of equipment) without making it public. With QRKit you save the code, add the password from your dashboard, and you are done in about a minute.

A regular QR code opens for anyone who scans it. Adding a password puts one step in between, so only people who know the password get to the content. That makes it a good fit for anything you print and leave out in the open, like signage, a product insert, or a label on equipment, where you cannot control who walks up and scans.

QRKit lets you add a password to any dynamic QR code type, including links, PDFs, hosted files, and vCards. You can change the password anytime without making a new QR code.

Want to share your Wi-Fi login instead? Use our Wi-Fi QR code generator. That is a separate feature built for network access. You can also share contact details with a vCard QR code.

Why protect

Why Password-Protect Your QR Codes?

A password gives you control over who gets to the content behind your code. Here are the most common reasons small businesses make a QR code with password protection instead of a plain one.

Private documents

Put a code on a product insert, a packet, or a brochure that links to pricing, contracts, or instructions. Only the people you give the password to can open it. You change the password anytime from your computer, without reprinting, or delete the code outright if it gets out.

Members-only content

Keep content behind a password for the people who should see it, like member resources, paid downloads, or early access. Put the code on a card or sign, hand out the password to the right people, and change it between groups when you need to.

Staff and member access

Put a code on a door or a sign where only staff or members should get the link. Point it at an internal page, a shift schedule, or a shared document. Only people with the password can open the resource.

Compliance needs

Support data protection rules like HIPAA and GDPR when you share information by QR code. A password adds an access step that helps keep sensitive data with the right people. See how this works for healthcare QR codes.

Keep it from spreading

Stop a code from being scanned and passed around beyond the people you meant it for. Even if someone photographs the code off your sign or packaging, they still need the password to open the content, so it stays with the right circle.

Pre-launch pages

A link you print ahead of launch. Keep it locked until the page is ready, then remove the password without reprinting.

Printed signs and labels

A sign linking to documents meant for serious buyers, or an equipment label with manuals and warranty info for the owner. See real estate QR codes or print them as QR code labels.

How to create

How to make a QR code with password protection

Open the generator

Start in the QRKit generator on your computer and pick a dynamic QR code type, like a link, a PDF, a hosted file, or a vCard.

Add what you want to protect

Add the link, text, or file you want to protect, such as a contract, an internal report, or any hosted file. This is what people see once they enter the right password. For end-to-end protection, host the destination itself over HTTPS too.

Set a password from your dashboard

Save the code to your QRKit account, then open it in your dashboard and add the password there. You can change it later without reprinting. Anyone who scans the code sees a password prompt before the content opens. Share the password on its own, by email, text, or in person, so it never sits next to the printed code.

Add your branding

Add your logo and brand colors so it looks like yours, using QRKit's custom QR code generator. A code that looks like your brand builds trust and gets more scans, even with a password on it.

Download and print

Download it as PNG or print-ready SVG and put it on whatever you are printing, like signage, packaging, or a business card. Scan it with your phone first to check the password prompt shows up. Once it is live, use QR code tracking to see who scans it.

Tips for password protected QR codes: Never print the password next to the code. Share it on its own, by email, text, or in person. You can change the password anytime without reprinting, since every QRKit code is dynamic. Always scan it once before you hand it out. For extra security, pair the password with an expiration date so the code stops working after a set time.

What it locks

What the QR code password generator can lock

The password sits on the redirect, not inside the printed pattern. That one detail decides what you can lock and what you cannot, and it is the part most people miss when they try to make a QR code with password protection.

Codes you can lock

Any dynamic QR code can take a password: a link, a hosted file or PDF, or a vCard. The printed pattern points at a QRKit redirect, and the password prompt lives on that redirect. That is also why you can change the password later without reprinting anything.

Codes you cannot lock

A static QR code stores its content inside the printed pattern itself. The phone reads it straight off the paper, so there is no step in between where a prompt could appear and nothing to check a password against. If you want a password on it, build the code as a dynamic one from the start.

To lock a code you already made: open it in your QRKit account, set a password, and save. It takes effect on the code you already printed, so nothing has to be reissued. Creating a QR code is free. Password protection itself is on the Plus plan and up, from $16/month billed annually, which you can compare on our pricing page.

Locking a batch at once: the bulk QR code generator takes a password column in the CSV, so a spreadsheet of link codes goes out already protected — same Plus-plan requirement as a single code.

Password vs. encrypted

Password protected vs. encrypted QR codes

These two get mixed up a lot. A password protected code asks for a password before it shows the content. Encryption protects the data itself: every QRKit redirect runs over HTTPS, so the link between the phone and your content is encrypted in transit. You can add a password on top to control who actually gets in. The table below shows how both compare to a standard code.

	Standard QR code	Password protected	Encrypted
Anyone who scans can open it	Yes	No	No
Asks for a password first	No	Yes	Optional
Content scrambled until unlocked	No	No	Yes
Best for	Public links	Restricting who gets in	Sensitive data
Works with QRKit	Yes	Yes	In transit

A password is enough for most jobs, and it works with any phone camera. The features below add more control on top of it, from HTTPS in transit to access control and tracking.

HTTPS encryption

Every QRKit redirect runs over HTTPS, so the data between the phone and the destination is encrypted. If you need an encrypted QR code, this in-transit encryption is the baseline for any secure code, and a password adds an access step on top of it.

Dynamic QR code control

Point the same printed code at a new destination whenever you want, with no reprinting. If a code gets out you have three ways to cut access: replace the password, set an expiry date or unique-scan cap (both Plus-plan features), or delete the code. Learn more about dynamic QR codes.

Expiration dates

Set a code to expire after a certain date or a number of unique scans. Pair an expiration with a password for time-sensitive content that stays open only during the window you want — expiry is on the same Plus plan as password protection, so you get both together. Learn more about QR code expiration.

Scan tracking

See who scans your codes, when, and from where. Spot unusual activity early and act on it before it becomes a problem. Track who opens your QR code with scan analytics on every dynamic QR code.

Password Protected QR Codes: Frequently Asked Questions

: It happens in two stages, because the password lives on the code's destination rather than on the image. First build the code as a dynamic type — a link, a hosted file, a PDF, or a vCard — and save it to your QRKit account. Then open that saved code in your dashboard, pick the Password action, and set one. From then on every scan meets the prompt before the destination loads. Building, designing, and saving the code does not need a paid plan; setting the password does, from the Plus plan up.
: Yes, on any dynamic code. What the person scanning gets is a prompt on the QRKit redirect page: they type the password, it is checked against the stored value, and only then does your link, file, or page load. You can save an optional hint alongside it, which sits behind a “Show hint” link on that prompt and helps when a group shares one password. Requiring a password is a Plus-plan feature and up.
: It is worth being precise about what locking covers. The lock sits on the destination, not on the printed square, so anyone can still scan the code and reach the prompt — what they cannot do is get past it without the password. That is also why a code you built in Static QR mode cannot be locked at all: its content sits inside the pattern and the phone reads it with no server in between, so there is no moment at which a prompt could appear. SMS and calendar-event codes only come in that mode. Wi-Fi, plain text, and email let you choose in the builder, so switch them to Dynamic QR — or use a link, file, or vCard code, which are dynamic anyway — and then set the password from your dashboard on Plus or above.
: Find the code in your dashboard list, open the Password action, type the password, add a hint if you want one, and save. Nothing has to be reissued — the change takes effect on the next scan of the code you already handed out. The same dialog is where you later replace the password, edit the hint, or remove protection completely. It is available from the Plus plan up.
: No, and neither one scrambles the printed pattern. A password is an access check: when you set one, QRKit saves a bcrypt hash of it and checks what the scanner types against that hash rather than against a stored copy of the password. Encryption is about the data in transit, and every QRKit redirect runs over HTTPS whether or not you add a password. So the encrypted-in-transit part is already handled for you; the password is what decides who gets in.
: Yes, as often as you like, and the printed code itself never changes. One thing to expect: because the password is stored hashed, it cannot be read back to you, so the field opens empty and you either type a new password to replace the old one or remove protection. Replacing it is the usual way to cut off an old group once the same printed code has moved on to a new one.
: Building, customising, and previewing a QR code costs nothing, and downloading the image needs a free account rather than a paid one. The password itself starts on Plus, from $16 a month billed annually, shown in your local currency on the pricing page. Two things worth knowing about the free plan while you try it: it covers one dynamic QR code and 100 scans a month across the whole account, and past that the code stops redirecting until the count resets the following month. Paid plans have no scan cap.
: Upload the document as a hosted file code, save it, set a password on it, and pass the password along a separate channel — never printed next to the code. Anyone who scans reaches the prompt rather than the document. Two practical things to plan around: the Plus plan you need for passwords carries a 20 MB file ceiling, and when a document should stop circulating you have three ways to cut access off without touching what you printed. Replace the password, so the one that went around no longer works. Give the code an expiry — the same Plus plan lets you set a cut-off date and time, or a cap on unique scans, after which anyone scanning sees a short message you write instead of the file. Or delete the code, which is the permanent version of the same thing.
: Only if you build it as a dynamic Wi-Fi code. Left on Static, the network name and its password sit inside the printed pattern and the phone reads them with no server in between, so there is nowhere for a prompt to sit. Switch the builder to Dynamic and the scan opens a QRKit-hosted page showing the network details instead — that page takes a password like any other dynamic code, from Plus up, so the prompt comes first and the credentials only after. Worth separating two things that share a name: the password field in the Wi-Fi builder is the network's own password, not an access check on the code.

Get started

Put a password
on your QR code

Add the link, save the code, then set a password from your dashboard. If it earns its keep, you can upgrade when you are ready. Plus plans start at $16/month billed annually.

Works on any dynamic QR codeOn the Plus plan and upChange the password without reprintingHTTPS encrypted redirects

Create your password protected QR code See pricing →

Password protection is available on all dynamic QR codes. Track who accesses your content with scan analytics. See pricing for plan details, explore QR codes for business, or start from our QR code generator.