Outlook Safelink Decoder
Extract the real destination URL from a Microsoft Outlook Safe Links wrapped link, without visiting it.
Original destination URL
https://example.com/path?id=42
This tool doesn't visit the link - copy it and open it yourself only if you trust the destination.
Other tracking parameters
data=05|01|
sdata=abc123
reserved=0
Recommended Settings
Pro Tips
- •Microsoft's Safe Links wraps every link in incoming email with a redirect through Microsoft's own domain, which scans the destination when clicked - this tool just unwraps that redirect to show the real URL
- •This tool never actually visits or fetches the destination URL - it purely parses the wrapped link's query string locally, so it's safe to use even on a suspicious-looking link
- •The 'data' and 'sdata' parameters are internal Microsoft tracking tokens, not part of the actual destination
- •Always inspect the unwrapped URL carefully yourself before deciding whether to visit it - unwrapping doesn't mean the destination is safe
Most Popular
Most people paste a wrapped link from a suspicious-looking email to see exactly where it actually points before clicking it
When to Use This Tool
See a wrapped link's true destination without clicking through Microsoft's redirect.
Extract the original short, clean URL instead of forwarding a long wrapped Safe Links URL.
Decode a Safe Links URL to see the real destination it protects.
Verify what Safe Links wrapping looks like for links in your organization's email.
How It Works
Parse the pasted URL and confirm its hostname belongs to Microsoft's safelinks.protection.outlook.com domain
Extract the 'url' query parameter, which contains the original, URL-encoded destination link
URL-decode that parameter to reveal the plain original destination URL
100% Private
Files never leave your device. All processing happens locally in your browser.
Lightning Fast
Powered by Client-side URL parsing for optimal performance on modern browsers.
Open Source
Built with verified, open-source libraries. Fully transparent.
Frequently Asked Questions
Does this tool visit the link for me?
No. It only parses the wrapped URL's query string locally in your browser - it never sends a request to either the Safe Links redirect or the final destination.
Is a decoded URL guaranteed to be safe?
No. Unwrapping just reveals what Microsoft's Safe Links was protecting - it doesn't verify whether that destination itself is safe. Always evaluate the revealed URL carefully.
Why does the destination URL look garbled?
The original URL is percent-encoded inside the wrapped link's query string. This tool automatically decodes it back to a normal, readable URL.
Is my pasted link sent to a server?
No. All parsing and decoding happens locally in your browser.