How I decode Outlook SafeLinks before clicking a suspicious URL

Outlook SafeLinks wrap a destination URL inside a Microsoft protection URL. Decoding helps reveal where the link wants to go.

The SafeLink Decoder tool helps with the mechanical part, but I still check the result before using it somewhere real.

The simple idea

Outlook SafeLinks wrap a destination URL inside a Microsoft protection URL. Decoding helps reveal where the link wants to go.

I use the tool to make the transformation visible: input on one side, output on the other, and a quick sanity check before I copy anything.

Step 1: Paste the SafeLink URL

Paste the SafeLink URL.

Step 2: Extract the original destination

Extract the original destination.

Step 3: Decode URL-encoded characters if needed

Decode URL-encoded characters if needed.

Step 4: Check the domain carefully

Check the domain carefully.

Step 5: Do not click only because the link was decoded

Do not click only because the link was decoded.

Step 6: Compare the destination with the email context

Compare the destination with the email context.

Step 7: When in doubt, visit the official site manually instead of using the email link

When in doubt, visit the official site manually instead of using the email link.

My checklist

Before I trust the result, I check:

• Paste the SafeLink URL.
• Extract the original destination.
• Decode URL-encoded characters if needed.
• Check the domain carefully.
• Do not click only because the link was decoded.
• Compare the destination with the email context.
• When in doubt, visit the official site manually instead of using the email link.

Small utilities are useful because they remove repetitive work. They are safest when the output is still reviewed.