An Office 365 QR code encodes a SharePoint or OneDrive share link, so a scan opens a document, form, or slide deck without anyone typing a long address. The code does not grant access. What a scanner can open is decided by the link type you created, and getting that wrong is a common reason these codes fail.
The generator encodes exactly the link you paste and runs in your browser.
How do you make an Office 365 QR code?
- In OneDrive or SharePoint, select the file, choose Share, and set the link type and permissions.
- Copy the link and paste it into the Shared Document Link field.
- Download the code and test it from a device that is not signed in to your organization.
https://contoso.sharepoint.com/:b:/s/team/EXAMPLEThat address is a made-up example of the general shape. Real share links are usually long and end in tokens, which produces a denser QR pattern than a short address would. Give the code more space when you print it.
Which link type works for a scanner?
Microsoft's documentation lists three kinds of sharing link: Anyone, People in your organization, and Specific people.
| Link type | Who can open it | Suitable for a public QR? |
|---|---|---|
| Anyone | Anyone who has the link, no sign-in | Yes, for non-sensitive material. Set it to view-only and add an expiry date |
| People in your organization | Signed-in colleagues only | Only inside the building, such as a noticeboard for staff |
| Specific people | Named accounts | No: scanners without the right sign-in are refused |
Two more catches. First, an administrator can turn off Anyone links for your tenant, so the option may be missing. Second, admins can force Anyone links to expire after a set number of days, which silently ends a printed code. Ask your IT team for the maximum lifetime before you commit to a print run.
Does scanning bypass the document's permissions?
No. The code is only the address. If the link requires a sign-in or a specific account, the scanner must have it. That is a feature: a leaked photo of an organization-only code leads to a login page, not to your file.
What about Microsoft Forms and other Microsoft links?
A Microsoft Forms link works the same way, as it is an ordinary web address. The same caveat applies: whether outside respondents can fill it in depends on the form's sharing settings. Test from a personal account, not your work one.
What if the link changes or expires?
A static code cannot be edited. If you expect to replace the file or rotate the link, encode a stable page you own with the URL QR code generator, and point that page at the current document. This also solves the density problem: a short redirect gives a sparser code.
Where does it work well?
Policy notices, safety checklists, event handouts and agendas, classroom worksheets, and onboarding packs. Pair it with a short title in text. For similar uses with other file services, see the Dropbox QR code generator and QR codes for PDF files.
How do you test it?
Open the code from a phone that is signed out of Microsoft, and again from a personal account. Confirm the file loads in view mode. Check readability with the scannability tester and consult the print size guide. Follow your organization's data-sharing policy before publishing any code that opens internal documents.