Static vs Dynamic QR codes: Which one should you print?

Static vs dynamic QR codes comes down to one trade-off. A static QR code stores your link or data directly in its pattern, so it works forever with no service behind it, but you can't edit it or count scans. A dynamic QR code stores a short link that redirects to your destination, so you can change where it points after printing and track every scan, but it depends on that redirect service to keep working.

In practice, static codes fit fixed data such as Wi-Fi logins and contact cards. Dynamic codes fit anything printed for marketing, where the page may change and you want to know if the print worked.

For marketers, ecommerce brands, agencies, freelancers, creators, newsletter authors, and businesses managing offline touchpoints, that choice affects whether you can update destination URLs, measure campaign performance, and avoid sending scans to a dead page later.

This guide covers how each type works, a side-by-side table, common use cases, scan tracking, conversion tracking, expiration risk, domain ownership, security considerations, GDPR compliance, and a checklist to run before you send anything to print so you can choose the right type with fewer surprises.

What is a static QR code?

A static QR code is a code where the data itself sits in the black-and-white pattern. Scan it, and your phone reads content encoded directly in the pattern.

No server, no account, and no company sits in between, so it does not depend on a third-party service and is best for permanent information. They are also usually free to generate and do not expire.

How static encoding works

A static code can hold a URL, Wi-Fi credentials, a vCard contact or simple text. According to DENSO WAVE, the company that invented the QR code, a code can grow from 21x21 to 177x177 modules and hold up to 4,296 alphanumeric characters or 2,953 bytes.

Codes also carry error correction, so a scratched or partly covered code still scans. DENSO WAVE lists four levels: L recovers about 7% of the data, M 15%, Q 25% and H 30%. Level M is the most common.

The catch is density. Because static qr codes work by storing the full data directly in the symbol, a longer website URL increases data density and adds more modules.

A long URL with UTM parameters, such as example.com/spring-sale?utm_source=flyer&utm_medium=qr_code&utm_campaign=spring, encodes more data, so the pattern becomes more complex and harder to scan when printed small.

The same destination behind a short link produces a much simpler one.

Can you edit a static QR code?

No. The data is the pattern, and the main difference is that static QR Codes cannot be edited once created, while dynamic QR codes can redirect to different URLs over time.

You can't convert a static code into a dynamic one either.

There is one workaround. If your static code points to a URL on a website you control, you can set a redirect on that URL; the static code itself still cannot be changed, but the URL it points to can still redirect users somewhere else over time.

The code stays the same, and your server sends people somewhere new.

What is a dynamic QR code?

A dynamic QR code is a code that stores a short redirect URL instead of the final destination content. When someone scans it, the request goes to the provider's server, which logs the scan and redirects the phone to the page you set.

The printed pattern is an ordinary QR code. "Dynamic" describes the redirect behind it, which you can change at any time from a dashboard.

To create dynamic QR codes, you need a QR code generator or dynamic qr code generator that supports editing, redirects, and a dynamic option.

What you can change after printing, and what you can't

You can change, including updating content in real time without reprinting:

• The destination URL, which you can edit any time after creation, even after printing

• The UTM parameters on that destination

• The design of future prints (colors or logo), since the encoded link stays the same

You can't change the domain or the slug inside the pattern. The code encodes something like go.yourbrand.com/menu. If you rename the slug to /dinner-menu or move to a different domain, every printed copy still points to the old address. Pick a domain and slug you will keep before you print.

What scan tracking tells you

Each scan creates a log entry, which is the basis for QR code tracking and the tracking capabilities available with dynamic codes.

A typical dynamic QR code dashboard shows total and unique scans, scan counts, country and city, device, operating system and time of scan.

Location comes from the scanner's IP address, so it's accurate to the city or country level. Some vendor videos claim dynamic codes show the "exact GPS location" of each scan. They don't. Precise location needs the person's permission on their phone, and a QR scan doesn't ask for it.

Every QR code in ShortPen works this way. ShortPen logs scans separately from clicks on the same link, and changing the destination doesn't reset the scan history. That data helps measure scan performance when running marketing campaigns, unlike static ones.

Static vs dynamic QR codes compared

The short version: when comparing static and dynamic QR options, static codes are permanent and free, while dynamic QR codes offer editability and measurement but depend on a provider.

If the content will never change and you don't need numbers, static is enough. If anything about the destination could change, or you need to report on results, use dynamic.

Do dynamic QR codes expire?

A dynamic QR code doesn't expire, but the redirect behind it can be switched off. When that happens, the printed code still scans and leads to an error page or a provider's upgrade screen.

Static codes never expire

A static code works as long as the print is readable. It breaks only if the page it points to goes offline or the print gets damaged.

Dynamic codes stop when the redirect stops

The usual causes are a free trial ending, a paid plan lapsing, a scan cap being reached, or the provider going out of business, since dynamic codes usually rely on a management platform and may stop redirecting if the subscription lapses.

Most services start users with a free trial for dynamic QR codes, and free tiers often include limits like these:

• Free dynamic codes expire after 30 days, with 50 scans per code.

• 2-3 free dynamic codes, each limited to 500 scans, after which the code stops working.

The provider shutting down is a risk with every dynamic code.

What users report ("hostage" QR codes)

Review sites contain many complaints from people who printed a "free" code and found out about the limits later. One Trustpilot reviewer wrote that their business now has to pay $552 plus tax a year to keep a code working.

A designer at Wilkinson Graphics documented a client's codes that stopped redirecting after 7 days unless the client paid $35 a month. These are individual reports, but the pattern repeats across providers.

What to check before you print a dynamic code

Ask these five questions before you commit a code to paper:

1. Is the free plan time-limited, or is it free for as long as you use it?

2. Is there a cap on scans per code or per month?

3. What happens to existing codes if you downgrade or cancel?

4. Whose domain is printed inside the code?

5. Can you export your links and data if you leave?

For reference, ShortPen's plans, including the free one, have no cap on links, QR codes, redirects or scans, and no time limit.

If you downgrade with more custom domains than the new plan allows, the extra domains are paused until you upgrade again, so keep long-life print on a domain your plan covers. You can test this on ShortPen's free plan before printing anything.

Who owns the domain inside your QR code?

Every dynamic code prints a domain onto your flyer, menu or package, including other printed materials. If that domain belongs to your QR vendor, the vendor decides whether the code keeps working.

On your own subdomain, such as go.yourbrand.com, the printed address belongs to you. You still get editing and tracking through the platform, and your brand is what people see when they scan.

That also gives dynamic QR codes a cleaner design because they use shorter URLs, and a custom branded domain makes the redirect easier for people scan to trust before they open it.

Owning the domain only helps if you can also take your links with you. If a platform controls the redirect and you can't export your links, a custom domain alone won't save the code when you leave.

Trust and quishing

QR phishing, or "quishing", uses codes to send people to fake login or payment pages. The FTC tells consumers to check the URL their phone shows before opening it.

That check matters. Unit 42, Palo Alto Networks' threat research team, reports an average of 75,000 QR code detections a day in its web crawlers, with 15% leading to malicious links. It names generic shortener domains (qrco.de, me-qr.com and qrs.ly) as the ones attackers use most.

A preview showing go.yourbrand.com is easier to trust than a generic shortener domain that attackers also use. It helps people decide to open the link. It doesn't make the code secure on its own.

ShortPen includes one custom domain on the free plan, which you connect with DNS records. Annual paid plans also include a free .link domain that ShortPen registers and connects for you.

Tracking what happens after the scan

A scan count tells you how many people pointed a camera at your code. It doesn't tell you how many signed up, booked or bought.

There are two ways to measure what happens next:

• UTM parameters. Add them to the destination URL (for example utm_source=flyer&utm_medium=qr_code) so Google Analytics 4 groups the sessions by campaign.

• A conversion pixel. A script on your website records actions like signups and purchases and ties each one back to the link or code that sent the visitor.

Use one code per placement. A poster and a flyer sharing one code give you a single combined number. Separate codes show which placement is worth reprinting.

With ShortPen, you install the ShortPen Pixel on your site once, then create events from the dashboard. An event can fire when a visitor reaches a URL (like a thank-you page) or from a line of code you add. Conversions then appear next to the scans for each link and QR code.

The free plan tracks 100 conversions a month and shows the last 30 days of analytics history. Older data is kept and becomes visible on a paid plan. Plus raises the limit to 10,000 conversions a month with unlimited history, and both paid plans come with a 14-day trial.

What a scan log contains (GDPR)

Static codes create no scan log, because no server is involved. Dynamic codes log each scan, usually with IP address, approximate location, device and time.

Under EU law, an IP address can count as personal data. The Court of Justice of the European Union confirmed this in the Breyer ruling (C-582/14) in 2016.

In practice, mention link and QR analytics in your privacy policy. Avoid creating one code per named person unless you have a lawful basis for tracking them. ShortPen hosts its data in the EU and uses pseudonymized analytics, but your own privacy notice still needs to cover the tracking. This is general information, not legal advice.

When a static QR code is the better choice

A static code is the better tool when the content is fixed and has to work without a provider, including personal use when nothing needs editing or tracking. That covers:

• Wi-Fi credentials. A guest network code in a café or office should connect people even when the internet is down, and the network details can be automatically saved after scanning.

• Contact cards (vCard). On business cards, phone numbers, email addresses, and LinkedIn profiles can be saved straight to the user's phone, with no website involved.

• Asset and inventory labels. Internal IDs that a scanner app reads don't need a redirect.

• Product packaging. Static QR Codes can provide essential information on product-label details that rarely change.

• One-time events or course pages. They also work well for a single campaign or an online course that will not need frequent updates.

• Permanent plaques and signs. If a sign must outlive any company, point a static code at a URL on a domain you will maintain, and handle changes with your own redirects.

Static codes also suit cases where you don't want any scan tracking at all.

If your need is on this list, a free static generator is a reliable, low-cost option for fixed information.

Why ShortPen only makes dynamic QR codes

ShortPen (our product) only creates dynamic QR codes. The reason is practical: marketing materials in marketing campaigns usually outlive their first destination. Pages move and offers end. And the only way to know if QR code campaigns worked is to measure them.

So every ShortPen QR code is generated from a ShortPen link, and you can generate branded dynamic codes from the same dashboard. You can edit the destination after printing, see scans next to clicks, and attach conversion tracking with the Pixel.

Codes sit in the same folders and tags as your links, so a campaign's posters, flyers and emails can be compared side by side.

The trade-off is the one every dynamic code carries: the code depends on a redirect. ShortPen reduces that dependency with a custom domain on the free plan, and a free plan with no time limit and no cap on QR codes or scans.

You can change a code's look without changing what it encodes. ShortPen lets you set the color, add a logo and choose a frame, then export the code as SVG for print or PNG for digital use.

How to choose: a quick decision guide

Answer these five questions:

1. Will the destination ever change? If yes, use dynamic, since it can send different users to different destination URLs over time based on user traits.

2. Do you need to measure scans or conversions? If yes, use dynamic, especially if you need reporting results when running marketing campaigns.

3. Is the data meant to work offline (Wi-Fi, a contact card)? If yes, use static.

4. Whose domain will be printed? If you use dynamic, prefer your own.

5. How long will the print stay in circulation? The longer it lives, the more a stable domain and a provider without time limits matter.

The rule of thumb: fixed offline data gets a static code. Anything printed for marketing gets a dynamic code on a domain you control, especially when you need greater control to set rules for different content experiences, redirect to different URLs, or deliver different campaigns for different users.

Print checklist

• Export as SVG for print, so edges stay sharp at any size.

• Use error correction level M or higher, and higher still if you add a logo.

• Keep any logo within 15 to 20% of the code area, and don't cover the three large corner squares.

• Print dark modules on a light background with strong contrast.

• Leave a quiet zone (empty margin) around the code.

• For flyers and business cards read at about 30 cm, print the code at least 2.5 to 3 cm wide.

• Test scans on iOS and Android at the real size and in the real lighting.

FAQ

Can I convert a static QR code to a dynamic one?

No. A static code's data is part of its pattern, so it can't be changed. Create a new dynamic code and replace the printed one. If the static code points to a URL on your own website, you can redirect that URL instead.

How can I tell if a QR code is static or dynamic?

You can't tell by looking at it. Scan it and check the URL your phone shows. A short link on a QR vendor or shortener domain usually means dynamic. The full destination URL usually means static.

Do dynamic QR codes expire?

The code itself doesn't expire, but the redirect can stop. That happens when a trial ends, a plan lapses, a scan cap is reached or the provider shuts down. Check the provider's free plan terms before printing.

Are dynamic QR codes free?

Usually only in small numbers. Many free plans include two or three dynamic codes, often with scan caps. ShortPen's free plan has no cap on dynamic QR codes or scans and includes one custom domain.

Can dynamic QR codes work offline?

No. A dynamic code needs an internet connection to reach the redirect server. For Wi-Fi logins or contact details that must work offline, use a static code.

Do static QR codes take longer to scan?

Only when they hold a lot of data. A long URL creates a dense pattern that is harder to read at small sizes. A static code with short content scans as fast as a dynamic one.

Can I change the domain or slug of a printed dynamic QR code?

No. The domain and slug are encoded in the pattern. Only the destination behind them can change, so choose a domain and slug you will keep before printing.

Conclusion

Static QR codes are permanent and free but can't be edited or measured. Dynamic QR codes can be edited and tracked, and they last only as long as the redirect behind them. The real question when choosing a provider is who controls that redirect, and whose domain sits inside your code.

For fixed data like Wi-Fi or a contact card, use a free static generator. For anything printed for marketing, create a dynamic code on your own domain.

You can do that on ShortPen's free plan and test a scan before the print run.