# QR codes for pharmacies

> Pharmacy QR codes work for medication guides, refill enrolment and opening-hours contact, never for anything identifying a patient. Note the symbology boundary: serialised medicine authentication in the EU and US uses Data Matrix by regulation, not QR, so your codes must sit clearly apart from the pack's mandated identifier.

Source: https://useqr.app/qr-codes-for/pharmacies · Last reviewed 2026-08-21 · UseQR is free forever, no signup.

---

## What a pharmacy can safely put behind a code

| Code | Where | Why |
|---|---|---|
| Medication guide ([PDF](/pdf-qr-code) or web) | Bag label, counter card | The full leaflet, large-text and translated versions |
| Refill enrolment | Bag stuffer, till card | Signing up for reminders while the bag is in hand |
| [Phone](/phone-qr-code) | Door, after-hours sign | One tap to the dispensary or the on-call line |

The boundary is absolute: **nothing patient-identifying goes in a payload**. A QR code
on a bag or leaflet is plain text readable by anyone who photographs it, and it persists
after disposal. Prescription numbers, names and medication-plus-name combinations are all
out, the same reasoning as [QR codes in HIPAA contexts](/docs/security/qr-codes-in-hipaa-contexts)
and [GDPR](/docs/security/qr-codes-and-gdpr): the code links to a service that
authenticates, it never carries the data.

## The Data Matrix boundary

The 2D code already on a prescription pack is not yours and not a QR code. The EU's
Falsified Medicines Directive (in application since **February 2019**) mandates a
serialised unique identifier in a **[Data Matrix](/glossary/datamatrix)** on prescription
medicines, and the US DSCSA takes the same symbology route. Dispensing scanners verify
and decommission that identifier. Two practical consequences:

- Never place a pharmacy marketing or information QR **near the pack's Data Matrix**,
  at the verification bench, adjacent codes produce mis-scans and workflow errors.
- Do not attempt QR-based "authentication" of medicines yourself; the regulated system
  already exists and uses a different symbology on purpose.

Counter and shelf codes are yours; the pack's code belongs to the supply chain.

## Placement in a pharmacy

- Bag-label codes are read at hand distance, **20–30 cm** → **2–3 cm**, printed by the
  same [thermal label printer](/docs/print/thermal-printer-qr-codes) as the bag label:
  check contrast, since faded thermal print kills scans quietly.
- Counter cards at **40–60 cm** → **4–6 cm**.
- A door code for out-of-hours (nearest open pharmacy, on-call number) earns its place
  better than most: it is read by someone with a genuine, immediate need.

## What goes wrong

- A refill code encoding the prescription number "for convenience", a privacy failure
  printed in plain text.
- Marketing QR stickers drifting next to the pack's regulatory Data Matrix.
- Thermal-printed codes on bags fading below scannable contrast within weeks in a sunny
  window.

## FAQ

### Can a pharmacy put prescription details in a QR code?

No. A printed payload is readable by anyone and lives on after the bag is binned. Codes
should link to an authenticated service (the patient logs in to see their own data), and
carry nothing identifying in the URL itself.

### Why do medicine packs use Data Matrix instead of QR codes?

EU falsified-medicines rules and the US DSCSA specify serialised identifiers in Data
Matrix, which suits high-density small-label printing and existing dispensing scanners.
A pharmacy's own QR codes must stay visually separate from that regulated identifier.

### What is the most useful QR code for a pharmacy?

An after-hours door code: on-call contact, the nearest open pharmacy and emergency
guidance, scanned by people who need it right now. Inside, medication-guide codes on bag
labels give patients large-text and translated leaflets.

## Try it

- https://useqr.app/url
- https://useqr.app/pdf
- https://useqr.app/phone