Skip to content
SafeHanded Docs

Checking a link before you open it

If you receive a link that claims to be from SafeHanded (or from your IT team via SafeHanded) and you’re unsure, you can check it before you open it. This is a page you can safely share with your users.

Section titled “How to check a link”
  1. Type safehanded.com/check into your browser yourself — don’t click a “verify” link inside the message. (The checker is on the address you type; typing it is the point.)
  2. Paste the link you received. You may be asked to complete a quick check that you’re a person before the result is shown.

The page strips the secret part of the link locally and only sends the address and token — so checking a link never opens it or uses it up.

What you’ll be told

Section titled “What you’ll be told”
  • Not a SafeHanded link. The address isn’t SafeHanded or any verified customer domain. If the message claimed to be from SafeHanded or your IT team, don’t open it — contact them another way.
  • Genuine, and live. Who created it (e.g. “Contoso IT for Acme Ltd, requested by Sam · Service Desk, ticket #4821”), whether that organisation has verified its identity with SafeHanded, when it expires, and whether it will ask you for a code. Plus the standing advice: only continue if you were expecting it and recognise the sender. For a credential request you can also choose I wasn’t expecting this — report it, which revokes the link and alerts the issuer.
  • Genuine, but no longer usable. Already used, replaced, revoked, expired or already viewed — and why.
  • Unknown. Our domain, but never issued or long dead — treat as suspicious.

What it never reveals

Section titled “What it never reveals”

The checker never shows the subject’s name, the recipient address, or any content. What’s disclosed about the issuer is the organisation’s own choice, and it never exceeds what the person holding the link would see by opening the page.

For technicians

Section titled “For technicians”

A check is recorded in the request’s audit trail (with the country it came from, never the IP address) — a positive sign the subject verified before acting, and an early warning if a check arrives from an unexpected country. See Audit log & compliance.

Section titled “Related”