See where it goes, before it opens.
A Chrome extension that shows a confirmation dialog with the real destination before a link in Gmail, Outlook on the web, or Yahoo! Mail (Japan) opens.
USE CASES
The text of a link and its destination are two separate things. The first click is paused and both are shown together.
The wording can be copied exactly; the destination host usually cannot. The link text and the real URL are shown side by side, and a mismatch between the two is flagged.
A shortened link is unreadable until you follow it. The first click is paused, the full URL is shown along with the fact that it is shortened, and you decide from there.
A familiar company name is hard to verify by eye once symbols or another script are mixed into the domain. Cautions such as a raw IP address, plain HTTP and Punycode are shown next to the destination.
Gmail, Outlook on the web and Yahoo! Mail work out of the box. For anything else, add the domain from settings or the toolbar popup and the same check applies there.
Features
The instant you click a link in your webmail, it pauses the very first navigation — once — and shows you where the link really goes. It never rewrites links, never opens them for you, and never blocks anything.
When you click a link in supported webmail, the first navigation is paused once so you can see the real destination.
It never touches your links or your email. Even after "Allow this time," nothing opens by itself — the link opens only when you click it again.
Every check finishes on your device. No server, no analytics, no telemetry.
It records no click history and no browsing history. The only thing stored on your device is your settings.
SERVICES & SETTINGS
You decide which sites are checked. Settings are stored on your device.
Built-in services
On Gmail only links inside the message body are checked; on Outlook on the web and Yahoo! Mail (Japan), links to external domains are checked. Each service can be turned ON/OFF.
Add sites to check
Add any webmail domain (e.g. mail.example.com) under "Sites to check" in the settings. From the toolbar popup you can also add or remove the site you are on, right on the spot.
Scope of "Allow this time"
It applies to that one URL, in memory only. Reopen the page and the confirmation appears again. There is no permanent allow-list.
ON / OFF
Toggle any time from the toolbar popup — globally or per site.
Display language
Auto-selected by your browser language.
Compatibility
Works on Gmail, Outlook on the web, and Yahoo! Mail (Japan), plus sites you add, in the latest version of Google Chrome.
HOW IT WORKS
A small confirmation gate that pauses just once, at the moment of the click. On every other page it reads nothing and does nothing.
The instant you click a link in your webmail, the first navigation is stopped on the spot.
You can also add any webmail site in the settings. Nothing happens on pages outside the list.
The link text, the destination host, and the full URL are shown side by side — with format-level cautions only when they apply.
Cautions include: display/destination mismatch, HTTP, IP address, Punycode, shortened URL. It never declares a link "dangerous" or "safe."
"Cancel" simply closes the dialog and allows nothing. Even "Allow this time" never opens the link.
After "Allow this time," the link opens only when you click it once more.
GET STARTED
Add it, open it from the toolbar, and reach settings in a click.
Just press “Add to Chrome” on the Chrome Web Store.
Open the extensions icon (the puzzle piece) at the top-right of Chrome and pin Safe Mail Link Check so it’s always one click away.
Right-click the icon → "Options," or open the settings from the popup. Toggle each service ON/OFF and add sites to check.
Click a link in your supported webmail and the confirmation dialog appears before it opens.
Open it any time from the extensions icon (the puzzle piece) at the top-right of Chrome.
PRIVACY
Because it exists to check links for you, it never takes custody of your email or your history.
Neither your email nor your click history ever leaves this extension.
It reads only the URL and visible text of the link you click, examines them on the spot, and discards them immediately.
Where data lives
Only your settings are stored on your device (chrome.storage.local). No click history or browsing history is recorded.
External traffic
No server, no analytics, no telemetry. There are no network-related permissions, and the extension has no means of sending anything anywhere.
Permissions needed
Site access exists so you can add your own webmail sites. On pages other than the supported services and the sites you added, it reads nothing. Beyond that it uses only settings storage (storage).
MORE TOOLS
Published tools that pair well with this one.
Free and fully on-device. Add it to Chrome and see where your links go, starting today.
View on Chrome Web StoreLEGAL
Our privacy promises and usage rules are collected in the documents below.