Static vs dynamic QR codes: what free generators do not tell you

Search for a QR generator and you will meet the same funnel everywhere: a free tool that makes a code, and an upsell to make it 'dynamic' so you can edit it later and see scan statistics. The pitch is real, and so is the catch. It is worth understanding exactly what you are buying.

What each one actually is

A static QR code has your content encoded directly into the black-and-white pattern. Scan it and the phone reads your URL, your Wi-Fi credentials or your contact card straight out of the image. Nothing is looked up, and no server is involved.

A dynamic QR code encodes a short URL that belongs to the QR provider. Scanning it hits their server, which then redirects to wherever you have currently pointed it. That indirection is what makes editing and analytics possible.

What you gain by going dynamic

• You can change the destination after printing, without reprinting.
• You get scan counts, rough locations, times and device types.
• The encoded URL is short, so the symbol is less dense and scans more easily at small sizes.
• You can A/B test destinations or route by device.

What you give up

Every scan of a dynamic code depends on a third party's server answering. That creates three real risks, and none of them are hypothetical — all three have happened to well-known providers.

1. Pricing changes. Your codes are hostage to a subscription. Stop paying and the printed materials stop working.
2. The company disappears. An acquisition or a shutdown takes the redirect with it, and there is nothing you can do about codes already in the wild.
3. Scan limits. Many free tiers cap monthly scans. The campaign that works is exactly the one that breaks.

Privacy is part of the trade too

A dynamic code means every person who scans your poster is logged by a company neither of you chose together. For a marketing campaign that may be fine and disclosed. For a Wi-Fi code in a waiting room, or a vCard on a business card, routing your visitors through a tracker is harder to justify — and under GDPR it is a processing activity you are responsible for.

The pattern that gets you both

There is a middle path that most articles skip: encode a static QR code that points at a short URL on a domain you control, and do the redirect yourself.

https://yourdomain.com/menu  →  301 redirect to the current menu PDF

The QR code is static and free. The redirect is a one-line rule in your CDN, your web server or a Vercel config. You can change the destination whenever you like, your analytics stay in your own logs, and nobody can switch it off or start charging you for it. The only cost is owning a domain, which you probably already do.

A simple decision rule

• Content that will never change — Wi-Fi credentials, a phone number, a vCard, a fixed location — use a static code. Editing is not a feature you need.
• Content that might change and you own a domain — use a static code pointing at your own short URL.
• Content that might change, you own no domain, and per-scan analytics genuinely drive decisions — a paid dynamic service is a reasonable purchase, as long as you go in knowing it is a permanent dependency.

Every generator on this site produces static codes, and it will keep working with no account and no expiry. Where a dynamic code is genuinely the right tool, it is worth paying a provider that will still be there in five years rather than the one with the most generous free tier.