Secure QR

Secure QR codes for products that can't afford to be faked

An ordinary QR code tells a scanner whatever was printed in it — and anyone can print the same thing. A Qrauthix Secure QR code is checked live against your product catalog, verifies only in the official Qrauthix app, and flags codes that are being copied.

What makes a QR code "secure"?

The QR pattern itself can't be made uncopyable — it's a picture, and pictures can be photographed. Security has to come from what happens when the code is scanned. A Qrauthix Secure QR code adds three things an ordinary code doesn't have:

  • A live, trusted check. Every code is issued against a real product and batch in your Qrauthix account and is verified against that record at scan time — active, inactive, expired, or already used.
  • App-only verification. Secure QR codes never verify in a web browser. The official Qrauthix app requests a one-time challenge that expires after 60 seconds and can be used exactly once, so a captured verification request can't be replayed.
  • Copy detection. Every scan is risk-scored. The same code scanned far too often, from many different devices, in a burst from one network, or from places no single product could travel between in time is flagged as suspicious.

How Secure QR verification works

1

Issue codes for your products

Generate Secure QR codes for a product and batch from your dashboard — one at a time or in bulk from Excel — with optional expiry and single-use settings.

2

Print them on packaging

Each code is a normal HTTPS link. Scanned with a plain camera app, it opens a page asking the customer to use the Qrauthix app — the same page for every code, real or not.

3

Customers verify in the app

The Qrauthix scanner app requests a one-time challenge and gets a verdict: genuine, with product and batch details, or a clear reason it couldn't be verified.

4

You hear about suspicious activity

Scans that score as suspicious can trigger a qr.suspicious webhook to your own systems, so you know which codes and batches to look at.

Secure QR vs. Simple QR vs. an ordinary QR code

Ordinary QRQrauthix Simple QRQrauthix Secure QR
Checked against your product catalogNoYesYes
Verifies in any phone browser—YesNo, app only
One-time challenge per verificationNoNoYes
Reveals whether a code is valid on the open web—YesNo
Risk scoring & copy detectionNoYesYes
Optional expiry & single-useNoYesYes
CostFree (generator)From the free Starter planGrowth plan and above

Use Simple QR when friction-free verification matters most, and reserve Secure QR for high-value or frequently counterfeited products. See Pricing for plan details and Security for the full technical picture.

What Secure QR doesn't do (yet)

Secure QR doesn't make a printed code impossible to copy — nothing can. It makes copies detectable and keeps verification out of reach of anyone not using the official app. Device attestation (Google Play Integrity), which would let us reject emulators and modified copies of the app, is on our roadmap and isn't enforced today.

FAQ

Common questions

A secure QR code is one whose scan is checked live against a trusted service instead of just revealing the text printed in it. Qrauthix Secure QR codes are issued against a real product record, can only be verified inside the official Qrauthix app, and every verification uses a one-time challenge that can't be replayed.

No. The free generator makes ordinary (static) QR codes that any scanner can read. Secure QR codes are issued from a Qrauthix account against your products and batches, and are included in the Growth plan and above.

Physically, yes — any printed code can be photographed or reprinted. What Qrauthix adds is detection: verification only happens in the official app, codes can be made single-use, and the risk engine flags patterns such as the same code being scanned far too often, from many devices, or from locations no single product could travel between in time. Flagged scans can be pushed to your own systems through a qr.suspicious webhook.

A page asking them to open the code in the Qrauthix app. That page is identical for every code, valid or not, so it can't be used to test which codes are real.

Yes. Secure QR codes are verified in the Qrauthix app, which is currently available for Android on Google Play. If you'd rather not require an app, Simple QR codes verify in any phone browser.

Yes. Each code can have an optional expiry date, and codes can also be marked single-use so that only the first successful verification counts.

Protect your highest-value products

Set up your organization, add a product, and issue your first batch of QR codes.