Do QR Codes Expire? What Actually Stops Working, and When

Do QR codes expire? Usually, no. The pattern printed on a label, poster, or package is just encoded data. What can expire or fail is the URL that the camera requests after scanning it.

That distinction matters because a code can look fine and still lead nowhere. To keep a printed campaign working, identify which type of QR code you have, then protect the domain and redirect behind it.

The short answer: the pattern does not expire, but the destination can#

A QR code stores text, often a URL. When a phone scans it, the phone opens or requests that URL. The code itself has no built-in countdown timer, renewal date, or subscription.

If the code stores https://example.com/menu directly, it is static. It will keep pointing to that address until the address stops serving the page or the printed code becomes unreadable. If it stores an editable redirect, the redirect service becomes another dependency.

Static QR codes: permanent data, fixed destination#

A static QR code contains its destination directly. It is a good fit when the URL is stable and you do not need to change the destination after printing. There is no hosted QR subscription to renew.

The tradeoff is inflexibility. If a menu moves, a campaign page changes, or a product support URL is replaced, every printed code still points to the old address. You can update the page at that address, but you cannot change the URL encoded in the graphic.

Dynamic QR codes: what you are actually depending on#

A dynamic QR code is a fixed graphic that points to an editable redirect or short link. The redirect receives the scan, checks its current rule, and sends the visitor to the destination you set. Change that rule and future scans can go somewhere new without reprinting the code.

The term describes the behavior behind the code, not a QR pattern that changes itself. The redirect layer is useful, but it must remain active. A QR code on your own domain can make the public address easier to recognize and control, but it is not automatically secure just because you own the domain.

Four ways a working QR code stops working#

• The subscription lapses. Some hosted QR providers disable redirects when a paid plan ends. The printed pattern remains readable, but the service no longer sends visitors onward.
• The provider shuts down or changes its service. A code tied to someone else’s redirect domain depends on that provider continuing to resolve the URL.
• The domain is lost. An expired domain, broken DNS configuration, or missing HTTPS setup can prevent the scan from reaching the redirect.
• The destination disappears. The redirect can still respond while sending visitors to a deleted page, a moved site, or an error page.

How to tell which kind of QR code you have#

Scan the code and inspect the URL before opening it. If it shows the final website address, the code is probably static. If it shows a short link, campaign domain, or redirect URL, it may be dynamic. That test tells you what the code requests, but it does not prove that the service will remain available.

Also check the redirect from a second phone and a different network. Confirm the first response, the full redirect chain, the final page, and the HTTPS certificate. A code that works once can still hide a destination or infrastructure problem.

Encoding a redirect you control#

For a long-lived campaign, create an editable redirect on a domain your team controls, set the first destination, and generate a QR code for that redirect. RedirHub supports QR code generation for an editable redirect. The redirect is what makes the destination changeable; it is not a separate standalone dynamic-QR product.

Before printing, scan the code from multiple phones. After launch, keep the redirect active and test the final destination at the frequency the campaign requires. For important placements, link monitoring can help detect a broken journey, but monitoring is a Pro+ requirement.

The takeaway#

QR codes do not expire as graphics. Static codes keep requesting their encoded URL, while dynamic codes keep requesting an editable redirect. The part that needs care is the infrastructure behind the scan: the domain, redirect rule, provider account, HTTPS setup, and final destination.