Security & Access Controls

Not every QR code should be open to everyone. QRelix provides four layers of access control — password protection, time expiration, scan limits, and geofencing — that you can combine to precisely control who sees your content and for how long.

All security settings are optional and can be configured during creation or updated anytime from your dashboard. Changes take effect immediately — no reprinting needed.

Password Protection

Require a password before the QR code content is accessible. When someone scans a password-protected code, they see a prompt and must enter the correct password to continue to the destination.

How to set it up:

  1. In the creation wizard, go to the Settings step.
  2. Toggle Password Protection on.
  3. Enter your chosen password.
  4. Save.

How to update it:

Open the QR code from your dashboard, click Edit, and change or remove the password. The update is instant — no new code needed.

Best use cases:

  • Internal documents — Share HR policies, internal wikis, or company announcements via QR codes on office walls without exposing them to visitors.
  • Gated content — Distribute exclusive content at events. Print the QR code on badges and share the password verbally or via email.
  • Member-only resources — Restrict training materials, partner portals, or client deliverables to authorized users.

Choose a password that's easy to share verbally (avoid special characters) but not easily guessable. If you're distributing it at an event, consider changing it daily.

Time Expiration

Set a date and time when the QR code stops working. After expiration, scanners see an expiration message instead of the destination content.

How to set it up:

  1. Toggle Time Expiration on in the Settings step.
  2. Pick a date and time.
  3. Save.

You can extend or remove the expiration later if your campaign timeline changes. The code doesn't need to be regenerated.

Best use cases:

  • Limited-time promotions — Run a flash sale with a QR code that automatically expires when the offer ends.
  • Event codes — Conference badges, booth displays, and session handouts that deactivate after the event.
  • Temporary file access — Share a downloadable resource that becomes unavailable after a deadline.

Scan Limits

Cap how many times the code can be scanned. Once a limit is reached, scanners see a limit-reached message.

QRelix offers two types of scan limits:

  • Daily limit — Resets at midnight UTC each day. Useful for daily deals or rotating offers.
  • Total limit — Lifetime cap across all days. Once reached, the code stops redirecting permanently (unless you raise the limit).

How to set it up:

  1. Toggle Scan Limits on in the Settings step.
  2. Enter your daily limit, total limit, or both.
  3. Save.

Best use cases:

  • Limited-quantity offers — "First 100 scanners get 20% off." The code automatically closes after 100 scans.
  • Controlled distribution — Prevent a QR code from being shared beyond its intended audience by capping total usage.
  • Preventing overuse — Protect a resource (like a file download) from going viral and consuming bandwidth.

Geofencing

Restrict access to a specific geographic area. Only scanners within the allowed location can see the content. Scanners outside the geofence see a restricted-access message.

How to set it up:

  1. Toggle Geofencing on in the Settings step.
  2. Define the allowed area — choose a city, region, or country.
  3. Save.

Location is determined from the scanner's IP address. No GPS access or app installation is required on the scanner's device.

Best use cases:

  • In-store promotions — A QR code on a shelf display that only works for customers physically in the store's city.
  • Venue-specific access — Conference session materials available only to attendees in the building.
  • Regional compliance — Restrict content to specific countries to comply with licensing or regulatory requirements.

Geofencing relies on IP-based geolocation, which is accurate to the city level in most cases. VPN users may bypass geographic restrictions.

Combining Controls

All four controls work together. Stack them for precise access control:

  • Password + Expiration — A gated resource that also has a deadline.
  • Scan Limit + Geofencing — First 50 in-store customers only.
  • All four — A password-protected code that expires on a date, caps at 200 scans, and only works in New York.

There's no conflict between controls. QRelix evaluates them in order: geofence first, then password, then scan limit, then expiration. If any check fails, the scanner sees the appropriate message.

Monitoring Access

Use the Analytics & Scan Tracking dashboard to monitor how your secured codes are performing. You can see how many scans were blocked by each control, track geographic distribution, and adjust limits based on real data.

Next Steps