Whitelabel QR code platforms for agencies
Most QR generators that say they're whitelabel are re-skinned widgets. What separates a real whitelabel QR code platform — and how to pick one.
A whitelabel QR code platform is software that lets you sell QR codes under your own brand — your dashboard, your domain inside the QR pixels, your branding from sign-in to invoice. Most generators marketing themselves as whitelabel only deliver one or two of those. If a platform changes the logo and calls itself whitelabel, that's a re-skin. The real version ships your URL inside the QR, your dashboard at your subdomain, and a billing flow that never mentions the underlying vendor.
This post is for agencies and resellers picking a platform. Not for someone shopping a paid tier of a single-tenant tool. The decision criteria are different: a single-tenant generator competes on UX; a whitelabel generator competes on whether you can plausibly tell a client "this is ours" without lying. The agencies who land in the wrong column usually meant to sign up for a commission-based reseller program and ended up paying for a tenancy they don't need — the white-label vs reseller program distinction is the post to read before you commit either way.
What "whitelabel" actually has to mean
Three layers decide whether a platform is genuinely whitelabel: the redirect domain (what URL the QR encodes), the dashboard surface (what your customers see when they log in), and the customer-facing brand (sign-in, sign-up, pricing, password reset, invoices). If any of those still says the vendor's name, your customers know who's underneath. That's not whitelabel — that's reseller mode with a branded sticker. Picking the platform is the easy hour of a much longer transition — the rest of it, week by week, is in the 90-day path from employee to whitelabel SaaS owner.
Most listicles don't bother distinguishing these. They treat "branded login" as the whole answer. It isn't.
The five surfaces a real whitelabel platform owns
The redirect domain is the URL inside the QR pixels. If a customer scans your QR and lands on qr-co.com/abc123 for half a second before redirecting, that's the vendor's domain printing free trust signals on every poster you ship. Real whitelabel encodes a URL on a domain you own — links.youragency.com/abc123 or your client's domain. That domain ages with you, survives vendor changes, and feeds analytics under your roof.
The dashboard is where your customers — or your clients' staff — generate and manage QR codes. Whitelabel means it loads at your subdomain, shows your logo, runs your accent colour, and never references the underlying tool. The slip-ups are subtle: a help link to the vendor's docs, a stray "powered by" footer, a feedback form that reveals the parent tool's brand.
The signed-out surface — sign-in, sign-up, forgot-password, password-reset, pricing — is where most "whitelabel" platforms quietly fail. The dashboard might look right, but the password-reset email lands from the vendor's domain with the vendor's logo. Your customer learns who's underneath the moment they reset a password. Real whitelabel routes those flows through your branding too.
The redirect resolver — the server that turns links.youragency.com/abc123 into the destination URL — is the part nobody markets but everyone breaks first. If the resolver returns a generic 404 page when a link expires, your customers see the vendor's 404. Real whitelabel resolvers fall back to your custom error page on your domain.
The analytics layer is the hidden brand surface. When your client downloads a CSV report or shares an analytics dashboard with a colleague, that PDF or CSV is brand surface. If the export header says "Generated by qr-co.com", you've leaked. The case for owning your link infrastructure goes deeper on why every layer matters.
Most platforms fake at least one of these
The platforms marketing themselves as whitelabel fall into three buckets when you actually pull the cover off.
Bucket one — the dashboard-only re-skin. Your dashboard is on your-brand.qr-co.com or via custom subdomain, the logo is yours, the colours are yours. But the QR pixels still encode qrco.com/abc123, the password-reset email lands from noreply@qr-co.com, and the public pricing page is the vendor's. This is the most common pattern in the QR market because it's the cheapest to ship — change a logo and a few CSS variables and call it whitelabel.
Bucket two — the partial-domain platforms. They give you a custom domain on the redirect, but the dashboard is still on app.qr-co.com and the dashboard URL bar reveals the parent. This is closer to whitelabel but breaks the moment a customer copies a dashboard URL into Slack. Some agency clients will catch it; most won't, until they do.
Bucket three — the genuinely whitelabel. Your domain on the redirect, your subdomain on the dashboard, your transactional email, your invoice header. These platforms are rarer because doing all five well is engineering work — multi-tenant TLS automation, per-tenant SMTP, per-tenant invoice templates. The price point is usually higher; reseller margins are worse on subscription tiers but better on lifetime tiers.
The buy-vs-build trade-off applies here too. The economics in the buy-vs-build whitelabel SaaS breakdown shift hard once you account for engineering time on multi-tenant TLS alone. Most resellers who start by building stop at bucket-one features and ship a re-skin with the parent's email still leaking.
The picking framework — eight questions
The questions worth asking, in order of how likely the answer is to disqualify a platform.
What domain encodes the QR? Some platforms only let you set a custom domain on the dashboard — not on the redirect. That's a bucket-one disqualification. Ask before you sign anything.
Where does the password-reset email come from? If it lands from the vendor's domain, your customers will figure out who's underneath the first time someone forgets their password. The honest test: sign up for a trial, click forgot-password, look at the From header and the email body.
Can you set the dashboard subdomain on your domain? Not agency.parent-tool.com. If the platform offers a CNAME to a subdomain you control, that's bucket three. If it only offers a subdomain on its own domain, that's bucket two at best.
Are dynamic QR types — vCard, WiFi, calendar, email — actually dynamic? Most generators bake those payloads into the QR pixels. Real dynamic types redirect through your domain to a hosted vCard or WiFi credential page, so you can update them later without reprinting. The dynamic vCard QR explainer covers why this matters more than people expect.
What's the analytics retention? Some platforms purge scan data after 90 days on lower tiers. If you're selling annual contracts, this is a churn vector — your customers will ask for last-quarter's data in February.
Can your customers add custom domains themselves? Multi-level whitelabel — you sell to agencies who sell to brands — needs your customers to add their own domains inside their dashboard. Most platforms only support one level deep.
What does the export header say? Run a CSV export. Open it. Read the metadata. Half the platforms in this market embed a footer line in the export with the parent tool's name. The other half don't. This is a 30-second test that disqualifies a quarter of the field.
What does cancellation look like? When you stop paying, do your customers' QRs keep working until end-of-term, or do they brick on day one of the lapse? The honest platforms keep redirects live for the term you paid for. The dishonest ones use cancellation as leverage. Ask explicitly and get the answer in writing.
Linked.Codes ticks all eight on the lifetime tier — your domain on the redirect, your subdomain on the dashboard, your transactional email, your invoice header.
Grab the lifetime tierWhat this looks like inside Linked.Codes
The platform was built around the five-surfaces test. Custom redirect domain on every plan via the custom domain setup walkthrough — single A-record, automatic TLS via Let's Encrypt. The dashboard runs on a subdomain you set in Settings → Branding — your logo, your accent, your wordmark across every signed-in surface. Sign-in, sign-up, password-reset, and pricing pages pick up the same brand variables. Transactional email runs on per-tenant SMTP credentials, so the password-reset email lands from your domain when you connect your provider — see the whitelabel email setup.
The redirect resolver is the part most platforms get wrong. When a link expires inside Linked.Codes, the resolver renders a 404 on your domain with your branding — not a generic vendor splash. Same for plan-cancellation: redirects keep working through end-of-term.
The analytics layer respects the boundary. CSV exports include your brand name in the header, not Linked.Codes. PDFs render with your logo. The activity log inside the email settings shows tenant-scoped sends — admin staff do not see your customers' email events.
This is what whitelabel is supposed to mean. Not a re-skin with a different logo.
The mistakes that come up across every reseller cohort
Three patterns burn first-time resellers. The first is signing a yearly contract on a platform without testing the password-reset email. By the time you notice the leak, your client is renewing. Run the test on day one — register, log out, click forgot-password, screenshot the email.
The second is assuming "custom domain" means redirect domain. Half the platforms calling themselves whitelabel use "custom domain" to mean dashboard-only. Read the documentation, not the marketing. Or sign up for a trial and try setting a domain on a redirect — the platform either supports it or it does not, and the answer takes five minutes.
The third is underestimating support load. Whitelabel means your customers ask you for support. Not the parent tool. If you are a one-person agency, calculate the support-hours cost into your pricing — the solopreneur side-project breakdown covers the realistic load, and the qr code reseller business economics post breaks support into a per-customer-per-week ticket rate you can budget against. The platforms that ship cleaner UX cost more upfront and save you support hours forever. Beyond the five customer-facing surfaces, the agency-side buyer's checklist for whitelabel tools walks the operational surfaces — per-client billing, role-scoped access, audit logs — that decide whether the platform survives contact with a thirty-client portfolio. QR codes are one category in a broader stack — the white-label SaaS tools to resell roundup covers which neighbouring categories (short links, forms, scheduling, analytics) ship genuine reseller arrangements and which ones to walk away from.
A whitelabel platform that leaks the parent's brand on password reset is not whitelabel. It is a reseller agreement with extra steps.
What lifetime tiers change about the math
The QR market splits between subscription platforms (typically $30 to $300 per month per agency, with seat caps) and lifetime platforms (one-time fee, modular hosting). The math shifts hard at year three. A subscription that bills $99 per month for a small agency runs $1,188 per year, $3,564 over three years. A lifetime tier at the four-figure entry point pays back inside year one if you are billing clients $50 per month each. Linked.Codes runs the lifetime model — see pricing for the current figure.
The trade-off is vendor stability. A subscription model means the vendor has incentive to keep the lights on; a lifetime model means the vendor took your money and might disappear. The vendor-stability checklist applies in both cases — revenue, team size, infrastructure ownership. The reasons to own your link infrastructure lay out why this matters more than the price difference.
Most agencies running QR campaigns fold within their first year because the model is not sustainable on subscription pricing. The ones that survive either run high-margin retainers or pick a lifetime platform and pocket the per-customer profit. The white-label QR business playbook covers the operating-model side of this.
What to do once you have picked a platform
Setup on a real whitelabel platform takes 30 to 60 minutes. The order matters. Start with the redirect domain, because DNS propagation is the slowest step and you want it warming while you do the rest. Add the dashboard subdomain second. Then upload branding. Then connect transactional email. Then create your first asset.
The getting-started doc walks the order and shows the form fields. The mistake to avoid: do not announce launch to customers before the password-reset test passes. Reset a password yourself first. Look at the email. If anything in there says the parent tool's name, fix it before you ship.
If your customers will be agencies (multi-level whitelabel), test the second-level case too — sign up as a sub-tenant inside your own platform, set their own custom domain, run the same password-reset test. Most platforms break here. The ones that do not are worth paying more for.
What is the difference between whitelabel QR and reseller QR?
Whitelabel means your brand on every customer-facing surface. Reseller means you sell the parent tool's brand at a discount. Resellers usually keep the vendor's name visible; whitelabel platforms hide it. Both are legal — whitelabel needs more engineering on the platform side.
Can a free QR code generator be whitelabel?
No. Free generators monetise via the vendor's own brand, attribution, or upsell prompts inside the dashboard. The economics do not support a whitelabel surface that hides the vendor entirely. The free-vs-paid QR generator comparison covers the trade-offs.
Do I need a custom domain to call myself whitelabel?
Yes — on the redirect, not just the dashboard. The QR pixels encode a URL. If that URL is the vendor's domain, every print piece your customer ships carries the vendor's brand. The redirect domain is the most-visible whitelabel surface and the one most platforms skip.
How much do real whitelabel QR platforms cost?
Subscription tiers run $30 to $300 per month per agency. Lifetime tiers run a low four-figure one-time fee plus modular hosting. The buy-vs-build cost comparison breaks down the long-term math against building from scratch.
What happens to my customers' QRs if the platform shuts down?
Static QRs keep working — they encode the destination URL directly in the pixels. Dynamic QRs break when the redirect server goes dark. This is the single biggest reason to ask about cancellation terms before signing. Get the answer about end-of-term redirects in writing.
Can I move QRs between platforms later?
Only if the QR encodes a domain you own. If the QR encodes the vendor's domain, the QR is locked to that vendor — you cannot repoint it. This is why the redirect domain matters more than the dashboard domain on the long view.
How long does whitelabel setup take on a real platform?
The five-surface checklist takes 30 to 60 minutes once you have the domain ready. The slow step is DNS propagation, not the platform setup itself. Start with the redirect domain so propagation runs while you finish the rest.
Sourcesshow citations
- ISO/IEC 18004:2015 (QR Code spec) — https://www.iso.org/standard/62021.html
- Let's Encrypt: How It Works — https://letsencrypt.org/how-it-works/
- Mozilla MDN: HTTP redirections — https://developer.mozilla.org/en-US/docs/Web/HTTP/Redirections
- Cloudflare: What is a CNAME record — https://www.cloudflare.com/learning/dns/dns-records/dns-cname-record/
- IETF RFC 8555 (ACME protocol for automated TLS) — https://datatracker.ietf.org/doc/html/rfc8555
Try it on your own domain
Branded short links and dynamic QR codes, on your subdomain or your own domain. One-time purchase, no per-click fees.
