A small restaurant in our neighbourhood printed 500 menus last spring. Nice paper, clean layout, QR code in the bottom-right that pointed at the online menu for anyone who wanted to see allergens or call the bilingual version up on their phone. Two weeks after printing, the owner got an email. The free trial on the QR code was ending. To keep it working, he had eight days to pay €29 a month. Forever.
He didn’t. The menus still sit in a drawer behind the bar, because throwing out 500 printed menus felt worse than leaving them unused. The QR code resolves to a sign-up page asking his customers to start their own trial.
This is not a rare story. It is the business model of most QR code generators sold on the internet, and nobody explains it to you before you print.
This guide exists because we couldn’t find an honest one. Every article we read about QR code durability was written by a company with a reason to be dishonest about it — either they sell expiring QR codes, or they run the affiliate programs of companies that do. Reading twenty of them back to back, you learn almost nothing about the thing you actually want to know, which is: will this QR code still work in three years?
So we wrote the one we wished existed before we started building Heldqr. It is long, because the answer is not a sentence. It names competitors by name, which is impolite by SaaS-blog standards, and quotes reviews that they would rather you didn’t read. It also tells you when Heldqr is the wrong answer for you, because it often is. If you finish reading this, you will understand QR codes better than almost everyone who sells them.
Quick answers
Do QR codes expire? The black-and-white pattern never expires. The redirect behind a dynamic QR code can stop working when the provider deactivates it — almost always because a trial or subscription ended. That is a business decision, not a technical limit.
How long do QR codes last? A printed static QR code lasts 10+ years if the surface it’s printed on stays intact. A dynamic code lasts as long as the provider keeps the redirect alive.
Can I make a QR code that never expires? Yes, two ways. Either a static code whose destination URL you control yourself, or a dynamic code from a provider with a published continuity plan and a free tier that isn’t a trial.
What’s the best QR code generator that doesn’t expire? For static codes: QRCode Monkey, Adobe Express, or Canva — all genuinely free, all permanent, no account required. For dynamic codes with editable destinations and scan analytics: Heldqr (disclosure: this is our product), or Ownqrcode if you want a one-time payment with a longer track record.
Why did my QR code stop working? In descending order of likelihood: the provider deactivated it because a trial or subscription ended; the destination URL was taken down; the printed code is too low-resolution to scan reliably. Provider deactivation is by far the most common and the one nobody warns you about up front.
Is it legal for companies to deactivate QR codes you paid for? Usually, yes. Their TOS allows it and the QR pattern is technically still readable — it just points at a dead redirect. This is why “lifetime” and “no expiration” in QR marketing are meaningless words unless the company explains what happens in year five. Most don’t.
How QR codes actually work
Every QR code falls into one of two categories, and nobody makes this clear before you buy.
A static QR code encodes the destination URL directly into the black-and-white pattern. When you scan it, your phone’s camera reads the URL and opens it — no server in the middle. The pattern itself is the data. This means two things: the QR code works forever, as long as the destination URL still resolves, and you cannot change where it points without printing a new one. A static code is a physical URL.
A dynamic QR code encodes a short URL that points to the provider’s server. When you scan it, your phone goes to the provider, the provider looks up what URL you actually wanted, and sends you there. The advantages are real — you can change the destination, you get scan analytics, you can have one printed code that points at a menu today and a different menu next week. The catch is also real: the provider is now part of your QR code. If their server goes down, the code stops working. If they decide to deactivate your code, the code stops working. If they go out of business, the code stops working.
This is the single most important distinction in the market, and it is the one that generator websites work hardest to obscure. A typical pricing page will describe the “lifetime” plan as creating “QR codes that never expire,” without clarifying that what they mean is: we will keep the redirect running for as long as you keep paying. The word “lifetime” does a lot of lifting in those sentences.
When we say “most QR codes expire,” we are talking about dynamic codes that the provider deactivated. The pattern on the paper is fine. It’s still readable by any phone camera. It’s just pointing at a tombstone.
Why do QR codes expire?
The honest answer is: they don’t have to. They expire because the provider chose to make them expire.
A QR code can stop working for exactly three reasons, and only three.
Reason one: the destination URL died. The page you linked to was taken down, the domain expired, the content was moved. This affects static and dynamic codes equally, and it is not the QR code provider’s fault — it’s link rot, the same slow decay that affects every URL on the web. You can prevent it by pointing your QR code at a URL you control and plan to keep alive.
Reason two: the provider deactivated the code. A free trial ended. A subscription lapsed. A plan was cancelled. You used more scans than the tier allowed and the code was paused until you upgraded. The pattern still scans; the redirect doesn’t answer. This is by far the most common reason “expired” QR codes stop working, and it is entirely a business decision by the provider. Nothing technical forces it. They could keep your redirect alive for free; they just chose not to.
Reason three: the provider shut down. The company went out of business, got acquired and shut the product line, or pivoted away from QR codes. Rare but catastrophic — every code from that provider dies at once, with no migration path. This is what separates providers whose “lifetime” promises have ever been tested from those whose haven’t.
All of the pain in the market comes from reason two being presented as if it were reason one. A customer prints 500 menus, the trial ends, the menus stop working, and the support article says “your QR codes have expired.” Nothing expired. A company chose to break your QR codes to pressure you into paying. Calling it “expiration” makes it sound like a natural event — like milk going off — instead of what it is, which is a cancellation.
Once you see this distinction, most QR-code marketing becomes unreadable. A provider’s homepage will say “codes that never expire!” in the hero and, three scroll-lengths down, say “dynamic QR codes are deactivated when your trial ends.” Both sentences are true. They are just not about the same QR codes.
The market’s dirty secret
We don’t enjoy naming names. The category is full of real companies doing real work, and some of them have specific things they do genuinely well. What follows are not opinions — they are documented patterns that you can verify yourself in under five minutes by clicking the citations.
QR Code Generator / qr-code-generator.com (the Bitly-owned service) runs a seven-day trial that deactivates dynamic QR codes at the end unless you pay. Their own support article explains this plainly: [VERIFY: https://support.qr-code-generator.com/hc/en-us/articles/7665046137613 — “What happens to my account and QR Codes when the trial expires”]. On Trustpilot, the service sits at roughly 1.5 out of 5 stars across hundreds of reviews [VERIFY: https://www.trustpilot.com/review/www.qr-code-generator.com — confirm live rating and review count]. A representative complaint on Capterra from a user who printed materials before discovering the trial mechanic: [“They disable it after the 7 days and then when you have it printed tells you have to activate.” VERIFY: https://www.capterra.com/p/248582/QR-Code-Generator/reviews/ — confirm quote verbatim]. Another pattern in the reviews is the gap between the displayed monthly price and the actual annual billing cycle, which has resulted in customers being charged over €100 for what they thought was a month of service.
The sharpest evidence is not on a review site. It’s on QR Code Generator’s own community forum, where a customer wrote: “I recently found out that the qr codes [for my business cards, already printed] have expired. Is it possible to make them active again?” [VERIFY: https://community.the-qrcode-generator.com/t/my-qr-codes-for-business-cards-already-printed-are-expired-what-should-i-do/250 — confirm thread still public and quote]. That is a person with dead business cards in their pocket, asking the company that printed their QR pattern if they can have the redirect back. That thread is hosted on the company’s own support infrastructure.
QR.io runs a similar trial pattern. Their own help centre article [VERIFY: https://help.qr.io/en/articles/6977506-what-happens-to-my-qr-codes-and-account-when-the-free-trial-expires] confirms that free-trial codes are deactivated at trial end. Trustpilot reviews describe the same sequence repeatedly: sign up, print, discover the trial, pay, get billed at a higher rate than expected, have difficulty cancelling [VERIFY: https://www.trustpilot.com/review/qr.io — confirm current rating and representative quotes]. A Better Business Bureau complaint file documents cases of users being charged under invented account IDs after attempting cancellation [VERIFY: https://www.bbb.org/us/or/beaverton/profile/mobile-apps/qrio-1296-1000154286/complaints].
Me-QR takes a different approach that is, in its own way, worse. Their free tier is technically free — the codes never deactivate. But when someone scans them, the redirect serves a Google Ads interstitial before routing the visitor to the destination you specified. Me-QR’s own payment and account documentation explains this openly [VERIFY: https://me-qr.com/instructions-account-and-payment — confirm the admission is still in-page]. In practice, this means the QR code you printed on your menu shows ads to your customers before they reach your menu. The code never expires. It just becomes an ad surface.
Flowcode is a higher-end competitor with real design-quality differentiators — they genuinely produce the most visually polished QR codes in the category. Their pricing, however, has changed abruptly for existing customers. A Trustpilot review from a long-term paying customer describes rates nearly tripling without notice and features they previously paid for being moved to a higher tier [VERIFY: https://www.trustpilot.com/review/www.flowcode.com — confirm the 3x-rate review is still live; confirm the tier-migration pattern in Capterra].
Uniqode (formerly Beaconstac, rebranded in 2023) is the clearest example of reason three meeting reason two. Users who bought a “lifetime analytics” product under the Beaconstac brand have documented on Trustpilot that, post-rebrand, their plan was restructured twice and the cost roughly doubled [VERIFY: https://www.trustpilot.com/review/www.uniqode.com — confirm the downgrade-and-price-hike reviews]. Nothing about the original commitment was technically broken; the company just decided the commitment didn’t transfer cleanly to the new entity.
We could keep going. There are more providers with this pattern than without. The common structure is always the same: dynamic QR codes are advertised as permanent; the terms of service allow deactivation for non-payment; the conversion email lands after you’ve already printed. Calling this a dirty secret is slightly dramatic — all of it is disclosed somewhere, usually in the TOS — but in practice, customers discover it the same way they discover that a road is closed, which is by driving into the barricade.
What “lifetime” actually means in this market
The word “lifetime” appears on almost every QR code pricing page. It means at least four different things depending on who’s saying it, and a provider who refuses to clarify which one they mean is telling you something about what they mean.
Lifetime of the code. Your QR code keeps working regardless of what happens to you or the company. This is what a customer hears when they read “lifetime.”
Lifetime of your account. Your QR code keeps working until you stop paying, at which point it is deactivated. This is what most “lifetime plans” actually mean, and “lifetime” in this context refers to the life of your subscription, not the life of the code.
Lifetime of the company. Your QR code keeps working as long as the company continues to operate, which in SaaS is a median of something like four to seven years. When the company pivots, gets acquired, or runs out of money, the codes die. This is what the small minority of honest “lifetime” providers mean, and they rarely advertise it this bluntly because it sounds less reassuring than “lifetime.”
“Lifetime” as marketing. Your QR code keeps working until the terms of service change, at which point the company can legally deactivate it for any reason specified in the new TOS. TOS can usually be changed unilaterally with notice. “Lifetime” in this context means nothing enforceable and is essentially a word that tests well in user research.
When a provider says “lifetime,” the useful question is not “for how long?” The useful question is: what precisely happens to my existing codes if you go out of business, raise prices, change pricing tiers, or decide to discontinue this product? If they can’t answer that in plain language, “lifetime” means nothing.
There is one provider worth naming positively here. Ownqrcode charges $15 one-time for a lifetime dynamic QR code [VERIFY: current price and product shape]. They are transparent about what they mean, they have been operating long enough to have a track record, and they sell a genuine one-time product rather than a trial-dressed-as-lifetime. If you want a permanent QR code and one-time pricing is your priority, they are a legitimate option and have been at this longer than Heldqr has. We prefer Heldqr for reasons we’ll explain shortly, but this is a market where more than one honest provider is a good thing, and naming them here is easier than pretending they don’t exist.
How to evaluate a QR provider for durability
If you are choosing a QR code provider and want to avoid the patterns described above, there is a checklist that works. Print this, if you like, and read through it against any provider’s website before you pay them anything. It takes about fifteen minutes per provider and is worth it.
-
Do they distinguish static and dynamic codes clearly on the pricing page? If they blur the distinction — using “QR code” without specifying, or describing dynamic features in a “lifetime” context without clarification — they are hoping you’ll assume the best. This is a yellow flag, not always a red one, but it means you’ll need to read the TOS carefully.
-
If you cancel, what happens to existing codes? This is the critical question, and the answer is almost never on the pricing page. Check the TOS, the support centre, and the billing-cancellation page. “Codes will be deactivated” is a red flag. “Codes will continue to resolve” is what you want.
-
Is there a free tier that isn’t a trial? A free tier with a time limit is a trial. A free tier without a time limit is a product decision that says the company can afford to keep free users around. The latter is what you want, because it means the business model doesn’t require them to deactivate free codes.
-
Do they publish a continuity or shutdown plan? This is the quietest differentiator and, in our view, the most important one. Almost no provider publishes what happens to customer data and QR codes if the company shuts down. A provider who does is making a binding commitment. A provider who doesn’t is reserving the right to disappear with your codes.
-
Can you export or migrate your redirects? Ask: if you decide to leave, can you take your list of short-code-to-destination mappings with you? This is the standard test for lock-in across every SaaS category, and it applies cleanly here. Providers who make migration hard are protecting themselves against the day they raise prices.
-
How long has the company been operating, and under what entity? A “lifetime” promise from a six-month-old company is a promise from a six-month-old company. A promise from a company that has just been acquired is a promise from whoever owns them now. Neither is disqualifying — new companies are often the honest ones — but calibrate your trust to the track record.
-
What do the review trends look like? Trustpilot, G2, and Capterra are imperfect signals, but a score that is declining over the last twenty reviews is telling you something. Filter for verified purchases, read the three-star reviews before the one-star ones, and pay attention to specific complaints that repeat across multiple reviewers.
If a provider passes this checklist, they are likely to still be operating your codes in five years. If they fail more than two of these, they are unlikely to, and the fact that they sell a “lifetime” plan does not change that.
The Heldqr approach
Everything above was true before Heldqr existed and will be true if Heldqr stops existing. The market pattern is the pattern; our product is one attempt to solve it, and there are others.
Here is what we tried to do differently.
The free tier is actually free, forever. No trial. No credit card. One QR code, no expiry, no scan limit, no ads injected into the redirect. If you want to try Heldqr to see if it works before spending money, you can do that indefinitely. We do not deactivate free codes for any reason we can think of in advance, and we have written this into the TOS rather than into marketing copy.
The 10-year plan is a commercial commitment to a specific duration, not a “lifetime” promise. You pay €39 once and we owe you ten years of service, in writing, on that specific contract. This is more honest than “lifetime” because ten years is a number we can actually plan around and you can actually verify. It is also longer than most SaaS businesses exist — the median small-software company shuts down well before year ten — so the commitment is genuinely long-tail. Beyond year ten, your codes continue to resolve under the standard terms, but the paid-for commitment is for ten years, and we think naming the number is the point.
The €9 a month Power tier is for people who need more than one code plus real analytics. It includes unlimited codes, scan analytics, a bulk CSV import, and priority support. If you cancel, your existing codes remain on the 10-year commitment floor — they don’t deactivate, they revert. That matters because most providers use the threat of cancellation as leverage; we don’t need to.
There is a written continuity plan, published on GitHub, that specifies what happens if Heldqr shuts down. Twelve months’ notice. Source code released at month six so any third party can run the resolver. Anonymized data dump published at month nine so redirects can be reconstructed. Domain handed to a pre-arranged escrow at month twelve. The plan is at heldqr.com/continuity and the source commitment is in a public repo. We wrote this because we believe “what happens when you disappear” is the only durability commitment that matters, and every other QR provider’s answer to that question is silence.
Fair-use caps protect everyone. Truly unlimited anything is impossible to deliver at our price points, so the tiers have rate limits that are high enough not to matter for normal use — including viral-scan events — and low enough to prevent a single user from degrading the service for everyone else. These are published, not hidden in the TOS.
We are not the only provider doing some of these things. Ownqrcode has been transparent about pricing for longer than we have. QRCode Monkey and Adobe Express deliver on “free static QR codes forever” honestly. Where we think Heldqr is unusual is in combining (a) a genuinely free tier, (b) an explicit duration commitment, and (c) a public continuity plan binding us to behaviour we cannot walk back. If you care about any one of those individually, we are not the only option. If you care about all three, we are currently the only one we know of.
What Heldqr isn’t good for
Not every QR code use case fits Heldqr. The honest cases are as follows.
Enterprise teams needing SSO, team permissions, or audit logs. We don’t have these yet and won’t for a while. If your procurement process requires SOC 2 Type II, data residency guarantees, or role-based access control, use Uniqode or a similar enterprise-focused provider. They are better at this, and we are not trying to compete there.
Heavy design customization — gradient patterns, custom shapes, centered logos. Flowcode produces genuinely beautiful QR codes, and so do design tools like QRCode Monkey or Canva. Heldqr renders a clean, high-contrast code designed to scan reliably at small sizes on poor paper, but it is not a design tool. If you want a QR code that looks like a part of your brand system, start elsewhere.
GDPR/HIPAA-compliant workflows with audit trails and data residency controls. We are GDPR-compliant in the basic sense — EU hosting, no ad tracking, minimal PII — but we do not carry the formal compliance certifications that regulated industries require. If you are building a workflow that requires BAAs or specific residency commitments, talk to a specialist provider.
Purely static codes with no redirect. If your QR code points at a URL you control, and you are sure that URL will outlive you, you don’t need a dynamic-QR provider at all. Use a static generator like QRCode Monkey. They’re free, they work forever, and paying anyone — including us — for a service you don’t need is not an improvement.
Very high-scan-volume commercial operations. If you are a large retailer with a single code on tens of millions of packages scanning millions of times per month, our fair-use caps will become a constraint before our features do. Talk to us first — enterprise arrangements exist — but the public tiers are priced for SMB and indie use, not for packaging a Fortune 500 product line.
This list is deliberate. There are readers of this article who will be better off not using Heldqr, and writing this section is how we tell them so. Readers who bounce here because they’re the wrong fit are readers we didn’t want. Readers who stay because Heldqr actually fits are readers with a real use case.
Frequently asked questions
Do QR codes expire? The black-and-white pattern never expires — it is a picture, not a subscription. What can stop working is the redirect behind a dynamic QR code, which relies on a provider’s server. The pattern stays scannable; the destination becomes unreachable. Calling this “expiration” is imprecise; “deactivation” is more honest.
Do static QR codes expire? No. A static QR code encodes the destination URL directly into the pattern, with no server in the middle. It works forever, as long as the destination URL itself remains active. If you print a static code pointing at a URL you control and keep alive, it will still work in ten years.
How long do QR codes last? A printed static QR code lasts 10+ years on stable paper, laminated material, or engraved surfaces, provided the surface stays readable. Dynamic codes last as long as the provider keeps the redirect running — which can be decades or days, depending entirely on the provider’s business decisions.
What happens if I don’t pay for my QR code? With most providers, the dynamic QR code is deactivated — scanning it returns an error page or a “code not found” response. The printed pattern is unchanged; only the redirect is cancelled. With Heldqr, a cancelled subscription reverts you to the free tier; your existing codes remain resolving.
How do I make a QR code that never expires? Two options. One: use a static QR code generator (QRCode Monkey, Adobe Express, or Canva all work) and point it at a URL you will keep alive. Two: use a dynamic QR code provider with a published continuity plan and a free tier that isn’t a trial. If you need the editability and analytics of dynamic codes, option two is what you want.
Are free QR codes safe? Static QR codes from reputable generators are generally safe — they contain a URL and nothing else. Dynamic codes on free tiers depend on the provider: some are truly free (no ads, no expiration); some serve ads on the redirect (Me-QR); some are trials that deactivate after a short period (QR.io, QR Code Generator). Read the TOS before you print. The actual safety question is usually not “is the pattern safe” but “is the provider stable.”
Can I change a QR code’s destination without re-printing? Only with dynamic QR codes. A dynamic code points at a redirect URL on the provider’s server; you update the redirect target from the provider’s dashboard, and the next scan goes to the new destination. The printed pattern doesn’t change. Static codes cannot be changed without reprinting — that is the definition of static.
Is it legal for companies to deactivate QR codes you paid for? In almost every case, yes. The terms of service you agreed to typically give the provider the right to deactivate codes for non-payment, plan downgrade, or unspecified business reasons. No law currently requires QR code providers to keep codes working if you stop paying, and the QR pattern technically still resolves — it just points at a dead page. This is why “lifetime” in QR marketing is a word that tests well in customer research but has no independent enforcement mechanism. The only durability guarantee worth anything is an explicit contractual duration (e.g. ten years, in writing), or a published continuity plan that binds the company even if it shuts down.
What happens if the QR code provider goes out of business? With most providers, every code they issued stops working at once. There is no migration path, because the redirect database lives on their servers and is their property. A provider with a published continuity plan commits in advance to what happens in this case — typically, publishing the redirect data and the resolver source so third parties can keep codes resolving. Almost no provider has this. Heldqr does, and the plan is at heldqr.com/continuity.
Can a QR code stop working after a fixed number of scans? On some free tiers and lower-priced dynamic plans, yes — the provider imposes a scan cap and deactivates the code once it’s exceeded. This is rarely prominent in marketing copy and is worth checking before you print anything you expect to be scanned at volume.
In closing
Three things to take away from this, if nothing else.
One: static and dynamic QR codes are different products with different failure modes. “Will my code still work?” is a question with two answers, depending on which one you have. Most generator websites obscure the distinction deliberately.
Two: “free” and “lifetime” are marketing words, not contractual commitments. A provider who uses them without specifying what happens on cancellation, price change, or shutdown is reserving the right to decide all of those things later. The honest providers define the words.
Three: the only durability guarantee that means anything is an exportable, documented, open-able system. Ten years in writing. A published wind-down procedure. Data you can take with you. If a provider has none of those, their QR codes are temporary regardless of what the pricing page says.
If Heldqr fits what you need, start with the free tier — it’s free without the word “trial” anywhere near it. If Heldqr doesn’t fit, the checklist above will help you evaluate any provider carefully. Either way, please don’t print a QR code on something permanent until you know which kind you have.
Written in April 2026. We update this article every six months as pricing pages change, new horror stories appear, and the market shifts. If you find a claim here that’s gone out of date, or a competitor pattern we’ve missed, email us at hello@heldqr.com.