Outlook Safe Links decoder
Paste a safelinks.protection.outlook.com link to see the original address it wraps. Decoding happens instantly, without opening the link.
How Safe Links URLs work
Microsoft Defender for Office 365 rewrites links in email and Teams messages into addresses like nam12.safelinks.protection.outlook.com/?url=…&data=…. When you click, Microsoft checks the destination first and then forwards you.
The original address sits in the url= part, percent-encoded. The data= part identifies the message and recipient, and often contains your email address, which is why the decoder doesn’t log anything you paste.
Decoding is handy when you want to share a link without the wrapper, check a link before clicking, or see what a reported phishing email really pointed to.
What this decoder handles
- *.safelinks.protection.outlook.com
- *.safelinks.protection.office365.us (GCC High)
- Teams Safe Links (statics.teams.cdn.office.net)
- Links wrapped more than once, for example Safe Links around a Facebook or Google redirect
Questions
How do I get the original link from a Safe Links URL?
Paste it above. The decoder reads the url= parameter and shows the original address, along with any further redirects wrapped inside it.
Why does Outlook change my links to safelinks.protection.outlook.com?
Your organisation uses Microsoft Defender for Office 365 Safe Links, which rewrites links so it can check them each time someone clicks.
Is it safe to click the decoded link?
Decoding only shows the address. Clicking the original skips Microsoft’s click-time check, so trace it first if you are unsure.