QR codes that prove who issued them

What “signed” means

• Issuer proof — verification shows which organization created the code (when domain verification is set up).
• Integrity — if the payload was altered, the Ed25519 signature check fails.
• Lifecycle — you can expire or revoke a code so it stops working after verification.
• Optional URL lists — known-malicious URLs can be flagged at create/scan time. Brand-new phishing URLs may not be listed yet.

What this does not claim

QRalo does not make every QR sticker in the world safe. If someone scans a non-QRalo code with a normal camera app, that unsigned sticker is outside our control.

The protection applies when people use QRalo-issued codes and verify them (or land on qralo.com/verify). Teach customers to check the verification screen — that is how fake stickers get exposed.

Built for real print use