Loading…
Unwrap safelink and redirect URLs to real destination. Use when verifying links; for URL parts use url-parser. Input: wrapped URL. Returns final URL. 100% client-side.
Safelink Decoder is loading — interactive editor will appear here. Use examples below to try instantly once loaded.
Press ? for keyboard shortcuts
Decodes URL shortener and safelink redirect URLs to reveal the final destination address. Supports batch decoding of multiple URLs at once and handles common redirect patterns including query parameter extraction, path-based redirects, and base64-encoded destinations.
URL shorteners and safelink services hide the true destination of a link, which can obscure malicious sites. This tool lets you verify where a link actually goes before clicking it, improving online safety and awareness.
This tool is part of the DevStackIO platform — a collection of free online developer tools from DevStackIO. Browse more free developer resources on DevStackIO.
Security-conscious users, IT administrators verifying link destinations, content creators checking shared links, and anyone who receives shortened URLs and wants to know the real destination.
Paste one or more safelink or shortened URLs into the textarea, one per line
Click the "Decode URLs" button to process all links
Review the decoded destination URLs displayed below each original
Click "Copy" next to any decoded URL to copy it to your clipboard
Use "Copy All" to copy every decoded URL at once
Input: https://example.com/go?url=https%3A%2F%2Fdestination.com -> Output: https://destination.comInput: https://safelink.example.com/?u=aHR0cHM6Ly9... -> Output: the decoded base64 URLInput: https://short.example.com/abc -> Output: no embedded destination (server-side redirect, cannot be resolved client-side)Can this tool decode all URL shorteners? No
server-side redirects (like bit.ly) do not embed the destination in the URL and require an HTTP request to resolve.
Is it safe to paste URLs here?
Yes, the tool processes everything locally in your browser. No data is sent to any server.
What if the output looks like gibberish?
The destination may be double-encoded or use a format not yet supported. Try URL-decoding the output once more.
Does this tool follow redirects for me?
No, it only inspects the URL itself; it never makes network requests on your behalf.
Authoritative specifications, standards, and in-depth reading for Safelink Decoder.
Parse raw HTTP headers into readable name-value pairs. Use when debugging responses; for URL parts use url-parser. Input: header text ≤10MB. Returns table of headers. 100% client-side.
Split any URL into protocol, host, path, and query params. Use when inspecting URLs; for encoding query strings use url-encoder. Input: URL text. Returns component table. 100% client-side.
Parse user-agent strings into browser, OS, and device. Use when debugging traffic; for live device data use device-information. Input: UA string. Returns parsed fields. 100% client-side.
Calculate network, broadcast, and host range from CIDR. Use for subnet math; for geo lookup use ip-lookup. Input: IP/CIDR. Returns network details. 100% client-side.
Look up DNS records for any domain. Use when checking DNS; for IP geo use ip-lookup. Input: domain name. Returns A, MX, TXT records. 100% client-side.
Look up geolocation and ISP for any IP address. Use for geo data; for subnet math use ip-calculator. Input: IPv4/IPv6. Returns location and ASN. 100% client-side.
Generate Basic Auth headers from username and password. Use when testing APIs; for JWTs use jwt-generator. Input: credentials text. Returns Authorization header. 100% client-side.
Calculate IPv4 subnets, masks, and host counts. Use for IPv4 planning; for IPv6 use ipv6-calculator. Input: CIDR or mask. Returns subnet table. 100% client-side.