# QR codes for pharmacies

> Pharmacy QR codes work for medication guides, refill enrolment and opening-hours contact — never for anything identifying a patient. Note the symbology boundary: serialised medicine authentication in the EU and US uses Data Matrix by regulation, not QR, so your codes must sit clearly apart from the pack's mandated identifier.

Source: https://useqr.app/qr-codes-for/pharmacies · Last reviewed 2026-08-21 · UseQR is free forever, MIT licensed, no signup.

---

## What a pharmacy can safely put behind a code

| Code | Where | Why |
|---|---|---|
| Medication guide ([PDF](/pdf-qr-code) or web) | Bag label, counter card | The full leaflet, large-text and translated versions |
| Refill enrolment | Bag stuffer, till card | Signing up for reminders while the bag is in hand |
| [Phone](/phone-qr-code) | Door, after-hours sign | One tap to the dispensary or the on-call line |

The boundary is absolute: **nothing patient-identifying goes in a payload**. A QR code
on a bag or leaflet is plain text readable by anyone who photographs it, and it persists
after disposal. Prescription numbers, names and medication-plus-name combinations are all
out — the same reasoning as [QR codes in HIPAA contexts](/docs/security/qr-codes-in-hipaa-contexts)
and [GDPR](/docs/security/qr-codes-and-gdpr): the code links to a service that
authenticates, it never carries the data.

## The Data Matrix boundary

The 2D code already on a prescription pack is not yours and not a QR code. The EU's
Falsified Medicines Directive (in application since **February 2019**) mandates a
serialised unique identifier in a **[Data Matrix](/glossary/datamatrix)** on prescription
medicines, and the US DSCSA takes the same symbology route. Dispensing scanners verify
and decommission that identifier. Two practical consequences:

- Never place a pharmacy marketing or information QR **near the pack's Data Matrix** —
  at the verification bench, adjacent codes produce mis-scans and workflow errors.
- Do not attempt QR-based "authentication" of medicines yourself; the regulated system
  already exists and uses a different symbology on purpose.

Counter and shelf codes are yours; the pack's code belongs to the supply chain.

## Placement in a pharmacy

- Bag-label codes are read at hand distance, **20–30 cm** → **2–3 cm**, printed by the
  same [thermal label printer](/docs/print/thermal-printer-qr-codes) as the bag label —
  check contrast, since faded thermal print kills scans quietly.
- Counter cards at **40–60 cm** → **4–6 cm**.
- A door code for out-of-hours (nearest open pharmacy, on-call number) earns its place
  better than most: it is read by someone with a genuine, immediate need.

## What goes wrong

- A refill code encoding the prescription number "for convenience" — a privacy failure
  printed in plain text.
- Marketing QR stickers drifting next to the pack's regulatory Data Matrix.
- Thermal-printed codes on bags fading below scannable contrast within weeks in a sunny
  window.

## FAQ

### Can a pharmacy put prescription details in a QR code?

No. A printed payload is readable by anyone and lives on after the bag is binned. Codes
should link to an authenticated service — the patient logs in to see their own data — and
carry nothing identifying in the URL itself.

### Why do medicine packs use Data Matrix instead of QR codes?

EU falsified-medicines rules and the US DSCSA specify serialised identifiers in Data
Matrix, which suits high-density small-label printing and existing dispensing scanners.
A pharmacy's own QR codes must stay visually separate from that regulated identifier.

### What is the most useful QR code for a pharmacy?

An after-hours door code: on-call contact, the nearest open pharmacy and emergency
guidance, scanned by people who need it right now. Inside, medication-guide codes on bag
labels give patients large-text and translated leaflets.

## Try it

- https://useqr.app/url
- https://useqr.app/pdf
- https://useqr.app/phone