What is SafeLink, and why do links look like that?

It is Microsoft's rewriter: mail links are replaced with a URL that routes through Microsoft servers for scanning, then forwards you. The original address is inside the wrapper as a query parameter.

Why decode before clicking?

Two reasons: transparency (you see the real destination, including any look-alike domains) and convenience — the decoded URL opens directly, without the tracking hop and its privacy implications.

Does decoding bypass any security?

No. It only reads the wrapped URL; it does not touch attachments or Microsoft's scanning. You are simply choosing to visit the destination directly rather than through the redirect.

Outlook SafeLink Decoder — Guide

Decode SafeLink URLs from Outlook emails and recover the real address.

What it is and when to use it

Outlook SafeLink wraps every URL in corporate mail into a long tracking redirect — you click the wrapper, not the destination. Paste a SafeLink URL and this tool extracts the real address encoded inside it, so you can see (and decide about) where a link actually goes before opening it.

Recovers the real link hidden behind an Outlook SafeLink wrapper.

How to use it

Copy the very long SafeLink URL from the email
Paste it into the input
Click decode to get the original URL

A worked example

Fill in a sample SafeLink URL

https://nam.safelinks.protection.outlook.com/?url=https%3A%2F%2Fexample.com%2Fdocs

Copy this into the tool, or open Outlook SafeLink Decoder

Things that trip people up

Decoding only reveals the address — you still have to judge for yourself whether it is trustworthy

Questions people ask

What is SafeLink, and why do links look like that?: It is Microsoft's rewriter: mail links are replaced with a URL that routes through Microsoft servers for scanning, then forwards you. The original address is inside the wrapper as a query parameter.
Why decode before clicking?: Two reasons: transparency (you see the real destination, including any look-alike domains) and convenience — the decoded URL opens directly, without the tracking hop and its privacy implications.
Does decoding bypass any security?: No. It only reads the wrapped URL; it does not touch attachments or Microsoft's scanning. You are simply choosing to visit the destination directly rather than through the redirect.

Next steps

Open the Outlook SafeLink Decoder tool

Spotted something wrong on this page? Tell us via Contact Us