---
title: "Send only links people can trust · Agent Wranglers"
url: https://agentwranglers.se/playbook/email/email-security/safe-links
updated: 2026-10-20
licence: "All rights reserved"
---

# Send only links people can trust

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Required
- Chapter: [Email security](https://agentwranglers.se/playbook/email/email-security)
- Rule: Use HTTPS links on your own domain, and make the visible text match where each link goes. Never use public link shorteners.
- How: Link to your own domain, or a click-tracking subdomain of it. Show the address where people may want to check it, such as in a reset email. Shorteners hide the target and are often blocked by spam filters.
- Check: Extract every `href` from a test send. Each one starts with `https://` on your domain, and no link text shows a different domain from its `href`.

Example:

```html
<!-- Bad: the text and the target disagree -->
<a href="https://bit.example/x7">https://example.com/account</a>

<!-- Good: the link goes where it says -->
<a href="https://example.com/account">https://example.com/account</a>
```

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers email playbook: https://agentwranglers.se/playbook/email/email-security/safe-links`.

- Previous: [Never let visitors pick who gets your mail](https://agentwranglers.se/playbook/email/email-security/fixed-recipients)
- Next: [Make your mail hard to fake](https://agentwranglers.se/playbook/email/email-security/phishing-resistance)
- [Email security](https://agentwranglers.se/playbook/email/email-security)