Reveal URLs Chrome extension security report

Phishing relies on a simple trick: a link's visible text says one thing (paypal․com) while its real destination points somewhere else (paypal․account-verify․example). Reveal URLs shows you the real destination of links in your webmail and flags the ones where the visible text disagrees with where the link actually points. - See each link's true destination inline, above the link, or in its tooltip. - Mismatched links are highlighted in a colour you choose (red by default); honest links are shown in your "match" colour (green by default). - Works on Gmail, Outlook and Proton Mail in the browser out of the box, and on every message in Thunderbird regardless of provider. - Optionally works on additional webmail hosts you add yourself: open the options page, enter the host and the message-body selector, and grant the permission when your browser asks — nothing runs on a host until you opt in. - No accounts, no tracking, no servers: everything happens locally in your browser. The extension only reveals and flags links — it never changes, blocks or rewrites where a link points. Reveal URLs reads your settings from your browser's own sync/local storage and acts only on the built-in webmail pages listed below plus any host you add and grant yourself. Also see: Email link phishing: your app should always show the URL: https://www.phpfreelance.co.uk/blog/email-link-phishing-your-app-should-always-show-the-url