SEO Summary: Stop paying ransom for “expired” QR codes by understanding the trap of dynamic redirects, and learn how to generate your own permanently free QR codes using built-in browser tools, Python scripts, or a self-hosted redirector.

Stop Paying Ransom for QR Codes: The DevOps Guide to Generating Them Free and Forever

I’ll never forget the morning of our biggest product launch at TechResolve last year. Marcus, a brilliant but green junior dev on my team, had volunteered to help marketing generate QR codes for 10,000 printed conference badges. At 8:00 AM, my phone blew up. Attendees were scanning the badges and hitting a massive “TRIAL EXPIRED – PAY $35/MONTH TO UNLOCK” paywall. Marcus had Googled “free QR code generator,” clicked the top result, and unknowingly created ticking time bombs. I had to scramble, rip out the DNS for the event app on prod-gateway-01, and write a nasty regex redirect just to catch the vendor’s hijacked traffic. It was a nightmare, but it’s a trap I see engineers and business owners fall into every single day.

The “Why”: The Trap of Dynamic vs. Static Codes

If you’re wondering why a simple barcode suddenly demands a credit card, you need to understand the root cause: the fundamental difference between a Static and a Dynamic QR code.

A QR code is just text rendered as a 2D matrix of black and white squares. When you create a Static QR code for “https://techresolve.com”, those exact characters are permanently baked into the image. It doesn’t rely on any third-party server to work. It lives forever.

Scammy “free” generators default to Dynamic codes. Instead of encoding your actual website, they encode a URL they control—something like “https://scam-qr-site.com/redirect/a8f9b”. When a user scans it, they hit the vendor’s server, which then redirects to your site. This allows them to track analytics, but more importantly, it gives them the power to break the link and hold your printed materials hostage. You don’t own the routing.

Pro Tip: Never put a URL you do not explicitly control onto physical, printed materials. If you don’t own the domain in the DNS registry, you don’t own the QR code.

The Fixes: Taking Back Control

Look, I get it. You’re moving fast, the marketing team is breathing down your neck, and you just need a square image. Here is how we handle this in the trenches, ranging from a quick band-aid to full infrastructure control.

Solution 1: The Quick Fix (Browser Built-ins)

If you literally just need a static code right this second and don’t want to touch the CLI, stop searching Google. The safest tools are already in your browser.

• Chrome/Edge: Navigate to your target URL. Click the “Share” icon in the address bar (or right-click the page) and select “Create QR Code”. You get a free, static code instantly.
• DuckDuckGo: Go to DuckDuckGo.com and type qr https://yourwebsite.com. It generates a pure, static SVG image right in the search results. No tracking, no expiration.

Solution 2: The Permanent Fix (The DevOps Way)

If you need to generate codes in bulk, or you just want to trust your own tools, write a quick script. I keep a Python snippet on my local machine for exactly this purpose. We rely on the open-source qrcode library. It’s offline, reliable, and completely free.

First, install the library:

pip install qrcode[pil]

Then, run this simple script. I usually run this on my local workstation, but it works perfectly as a cron job on an admin box too.

import qrcode

target_url = "https://techresolve.com/careers"
output_file = "techresolve_static.png"

# Generate a pure, static QR code
qr = qrcode.QRCode(
    version=1,
    error_correction=qrcode.constants.ERROR_CORRECT_H,
    box_size=10,
    border=4,
)
qr.add_data(target_url)
qr.make(fit=True)

img = qr.make_image(fill_color="black", back_color="white")
img.save(output_file)
print(f"Static code saved to {output_file}. This will never expire.")

Solution 3: The ‘Nuclear’ Option (Self-Hosted Dynamic Redirects)

Sometimes marketing actually needs dynamic features. They want to print a banner today but decide where the link goes next week, and they want scan analytics. The solution isn’t to buy a SaaS subscription; the solution is to own the redirect infrastructure.

It’s a bit “hacky” to maintain your own URL shortener for a small project, but it guarantees you’ll never be extorted. I typically spin up a lightweight Nginx container on a cheap VPS (let’s call it prod-qr-redirect-01) and attach a custom short domain to it.

Here is what the Nginx config looks like on prod-qr-redirect-01:

server {
    listen 80;
    server_name techres.link;

    location /promo {
        # Change this destination whenever marketing asks, 
        # the printed QR code never changes!
        return 301 https://techresolve.com/spring-sale-2024;
    }
}

By hosting the middleman yourself, you get all the benefits of a dynamic QR code—analytics via server logs, changeable destinations—with zero risk of expiration or extortion. Remember, in DevOps, if you don’t control the routing layer, you don’t control the application. The same applies to those little black-and-white squares.

Darian Vance

Lead Cloud Architect & DevOps Strategist

With over 12 years in system architecture and automation, Darian specializes in simplifying complex cloud infrastructures. An advocate for open-source solutions, he founded TechResolve to provide engineers with actionable, battle-tested troubleshooting guides and robust software alternatives.

🤖 Frequently Asked Questions