What to Do If a QR Code Opened a Password Reset Page
A QR code can open a real password reset page, a fake account recovery form, or a device approval flow. The key is to separate viewing the page from submitting credentials, reset codes, or approvals.
If you only opened the page
- Close the page if you were not expecting a reset or account recovery step.
- Open the account from the official app, saved bookmark, or typed domain.
- Check whether the account shows a real reset request, unknown device, or security alert.
- Do not enter a password, one-time code, backup code, or recovery phrase from the QR page.
For fake login pages, compare I Scanned a QR Code and It Sent Me to a Fake Login Page.
If you entered information or approved a reset
- Password entered: change it from the real service and review active sessions.
- One-time code shared: treat the account as exposed and check recent sign-ins.
- Device approved: remove unknown devices and revoke suspicious app access.
- Payment or identity details entered: save evidence and contact the relevant provider.
Account-specific examples include Google Account QR Code Scam and Apple Account Recovery QR Code Scam.
Password reset QR red flags
- The QR code appeared on an unexpected sign, email, package insert, or support chat.
- The page asks for your old password, backup codes, or authenticator setup code.
- The destination domain does not match the account provider.
- The page pressures you to approve a device or reset within minutes.
If the scan involved device pairing, read Can a QR Code Add a Device to Your Account?
Frequently asked questions
Is opening a password reset page from a QR code dangerous?
Opening the page is not the same as entering a password, approving a reset, or sharing a one-time code. Risk increases if you submit credentials or approve an account change.
What if I entered my current password?
Go to the real service directly, change the password, review active sessions and devices, remove suspicious connected apps, and enable multifactor authentication if available.
What if I received a real reset email after scanning?
Do not click from the scanned page. Use the official app or typed website to review account activity and decide whether a reset was requested by you.
Can QRsafer stop account recovery scams?
QRsafer helps preview QR destinations before password reset, login, account recovery, and device approval pages open.
Preview account recovery QR destinations first
QRsafer helps preview QR destinations before password reset, account recovery, login, and device approval pages open.