# QR codes for law firms

> Law firms use QR codes for consultation booking on cards and letterheads, client-portal onboarding, lawyer vCards and seminar sign-ups. The binding rule: no client name, matter number or case detail ever goes in a payload — printed correspondence is retained for years, and a QR code is plain text anyone can read.

Source: https://useqr.app/qr-codes-for/law-firms · Last reviewed 2026-08-21 · UseQR is free forever, MIT licensed, no signup.

---

## The codes that earn their place

| Code | Where | Why |
|---|---|---|
| Consultation booking | Business cards, website, ad footers | The enquiry starts in a diary slot, not a voicemail |
| [Lawyer vCard](/vcard-qr-code) | Cards, email signatures | The right fee earner saved to contacts in one scan |
| Client-portal onboarding | Engagement letters, welcome packs | Portal adoption happens at signing, not after three chasing emails |
| Seminar and [webinar sign-up](/docs/marketing/qr-codes-for-webinar-signup) | Invitations, event banners | Registration captured while interest is live |

## Nothing about the matter goes in a payload

Legal files outlive most print runs: correspondence is routinely retained for **six or
more years** after a matter closes, tracking limitation periods, and every photocopy and
scanned archive keeps the QR code readable for that entire life. A payload is plain text
— anyone who photographs a letter can decode it with a free app. In a profession where
even the existence of a client relationship is confidential, that means:

- **Never** encode client names, matter numbers or claim references. The
  [GDPR reasoning](/docs/security/qr-codes-and-gdpr) applies with privilege stacked on top.
- Portal codes on engagement letters should point at the **generic portal login**. The
  code gets the client to the door; the login identifies them.
- If letters must carry per-recipient codes, use opaque single-purpose tokens that
  resolve only after authentication — the same pattern insurers use.

## Design for a conservative profession

Trust styling is plain styling: dark modules on a white ground with at least a **40%
luminance difference**, no gradients, no novelty shapes. A **2 cm** code fits a
[business card](/qr-codes-on/business-cards) read at 20 cm; letterhead codes sit in the
footer at the same size. One further reason to stay plain and labelled: law-firm
letterhead is precisely what [phishing campaigns](/docs/security/quishing-explained)
imitate. Print the destination domain in text under every code so a recipient can check
where it leads before scanning — and [verify the code decodes](/validate) before it goes
to the printer.

## What goes wrong

- A matter reference in a payload on a letter that passes through a mailroom, a scanner
  and a recycling bin.
- A booking code that lands on the firm's homepage; the enquirer wanted the diary, not
  the practice-areas menu.
- Codes pointing at a campaign URL that marketing retires 18 months into the letter's
  six-year archival life. Use stable URLs the firm controls.

## FAQ

### Can a law firm put the matter number in a QR code?

No. The payload is readable by anyone who sees or photographs the document, and legal
correspondence is retained for years. Point codes at the generic portal login or use an
opaque token that resolves only after the client authenticates.

### What is the best QR code use for a law firm?

Consultation booking. A code on cards, adverts and the website footer that opens the
booking diary converts interest at the moment it exists, instead of routing it through a
switchboard during office hours.

### Should law firm QR codes be styled with the firm's branding?

Sparingly. Keep dark modules on white with a 40% luminance difference and print the
destination domain under the code. Clients scan a law firm's post warily, and plain,
labelled codes read as trustworthy — which is the point.

## Try it

- https://useqr.app/url
- https://useqr.app/vcard
- https://useqr.app/calendar
- https://useqr.app/email