Choose the kind of output you need
Keep public examples separate from private values
A QR destination and a palette can be shared openly when their contents are intended to be public. A generated password must stay private. A UUID can identify a record, but the application must still decide who may access it. User-agent strings can be forged and should not establish identity. Generated output is a starting point for the task, not evidence that these surrounding checks have passed.
For a page or document, prepare the destination first, generate a QR code for its final URL, and check the code on the actual design. For test data, use invented records and inspect their JSON types in the developer workflow.
Check the downloaded code before printing
The recorded QR PNG was independently decoded to exactly https://nevco.online/. Use the print check sheet with its clear surrounding margin, then scan the printed copy with your phone and compare that exact destination. Computer decoding does not replace checking the final printed size, contrast, and camera result.