Password Protected QR Code

Encrypt a web link in your browser. The password is required on the unlock page. No database or account is used.

Expiry is enforced in the visitor's browser using the device clock. This is convenient client-side protection, not server-side access control.

Understand what a password protects here

  1. Enter an http or https destination and a password. Choose a future expiry only if the browser-clock limitation fits your use.
  2. Generate the encrypted link, then download its QR. Changing any field requires generating again so you do not accidentally export the previous settings.
  3. Open the code on a recipient device, test the intended password, and check the destination. Share the password separately from the image.

The encrypted destination lives in the URL fragment; no account is created. The unlock page still needs to load from this site. Expiry is checked using the visitor’s clock, and an already copied destination is not revoked. Use the destination’s own access controls when you need authorization or revocation. History records the encrypted link, not the password.

Read the worked example and troubleshooting guide →