diff --git a/packages/desktop/electron/main.js b/packages/desktop/electron/main.js
index 3d1a15ada2c..526a5a8ed6c 100644
--- a/packages/desktop/electron/main.js
+++ b/packages/desktop/electron/main.js
@@ -175,40 +175,6 @@ if (app.isPackaged) {
     paths.errorHtml = path.join(__dirname, '../error.html')
 }
 
-/**
- * Check URL against allowlist
- */
-function isUrlAllowed(targetUrl) {
-    const externalAllowlist = [
-        // IOTA Foundation
-        'blog.iota.org',
-        'chrysalis.iota.org',
-        'chrysalis.docs.iota.org',
-        'discord.iota.org',
-        'firefly.iota.org',
-        'iota.org',
-        'privacy@iota.org',
-        'wiki.iota.org',
-        'explorer.iota.org',
-
-        // Assembly / Shimmer
-        'assembly.sc',
-        'shimmer.network',
-        'explorer.shimmer.network',
-
-        // GitHub
-        'github.com/iotaledger/firefly/issues',
-        'github.com/iotaledger/firefly/issues/new/choose',
-
-        // Other
-        'support.ledger.com',
-    ]
-    const url = new URL(targetUrl)
-    const domain = url.hostname.replace('www.', '').replace('mailto:', '')
-
-    return externalAllowlist.includes(domain) || externalAllowlist.includes(domain + url.pathname)
-}
-
 /**
  * Handles url navigation events
  */
@@ -216,9 +182,7 @@ const handleNavigation = (e, url) => {
     e.preventDefault()
 
     try {
-        if (isUrlAllowed(url)) {
-            shell.openExternal(url)
-        }
+        shell.openExternal(url)
     } catch (err) {
         console.error(err)
     }
@@ -325,7 +289,7 @@ function createWindow() {
      * Handle permissions requests
      */
     session.defaultSession.setPermissionRequestHandler((_webContents, permission, cb, details) => {
-        if (permission === 'openExternal' && details && details.externalURL && isUrlAllowed(details.externalURL)) {
+        if (permission === 'openExternal' && details && details.externalURL) {
             return cb(true)
         }
 
diff --git a/packages/desktop/views/dashboard/collectibles/views/DetailsView.svelte b/packages/desktop/views/dashboard/collectibles/views/DetailsView.svelte
index de19d19de97..df87830b746 100644
--- a/packages/desktop/views/dashboard/collectibles/views/DetailsView.svelte
+++ b/packages/desktop/views/dashboard/collectibles/views/DetailsView.svelte
@@ -21,7 +21,7 @@
     import { ActivityType, formatTokenAmountPrecise } from '@core/wallet'
     import { BASE_TOKEN } from '@core/network/constants'
     import { activeProfile } from '@core/profile/stores'
-    import { Platform } from '@core/app'
+    import { openUrlInBrowser } from '@core/app'
     import { ExplorerEndpoint, getOfficialExplorerUrl } from '@core/network'
     import { openPopup } from '@auxiliary/popup'
 
@@ -58,7 +58,7 @@
     }
 
     function handleExplorerClick(): void {
-        Platform.openUrl(`${explorerUrl}/${ExplorerEndpoint.Nft}/${id}`)
+        openUrlInBrowser(`${explorerUrl}/${ExplorerEndpoint.Nft}/${id}`)
     }
 
     function handleSendClick(): void {
diff --git a/packages/desktop/views/dashboard/settings/views/help/HelpSection.svelte b/packages/desktop/views/dashboard/settings/views/help/HelpSection.svelte
index dfaa7075984..ab91a6e9853 100644
--- a/packages/desktop/views/dashboard/settings/views/help/HelpSection.svelte
+++ b/packages/desktop/views/dashboard/settings/views/help/HelpSection.svelte
@@ -1,7 +1,7 @@
 <script lang="typescript">
     import { Button, Text, ButtonSize } from 'shared/components'
     import { localize } from '@core/i18n'
-    import { Platform } from '@core/app'
+    import { openUrlInBrowser } from '@core/app'
     import { HelpAndInfoRoute } from '@core/router'
 
     export let route: HelpAndInfoRoute
@@ -9,7 +9,7 @@
     export let actionLocale: string
 
     function handleClick(): void {
-        Platform.openUrl(url)
+        openUrlInBrowser(url)
     }
 </script>
 
diff --git a/packages/desktop/views/onboarding/views/app-setup/views/ConditionsOfUse.svelte b/packages/desktop/views/onboarding/views/app-setup/views/ConditionsOfUse.svelte
index 00a2a3b90ca..2acee0d3f23 100644
--- a/packages/desktop/views/onboarding/views/app-setup/views/ConditionsOfUse.svelte
+++ b/packages/desktop/views/onboarding/views/app-setup/views/ConditionsOfUse.svelte
@@ -1,6 +1,6 @@
 <script lang="typescript">
     import { Link, Text } from 'shared/components'
-    import { Platform } from '@core/app'
+    import { openUrlInBrowser } from '@core/app'
 </script>
 
 <div class="mb-8">
@@ -102,7 +102,7 @@
     <Text type="h2" classes="mt-8 mb-5">2. Data Protection</Text>
     <Text type="p" secondary classes="mb-4">
         IOTA does not collect any of your personal data through the App. Please refer to the Firefly Privacy Policy (
-        <Link onClick={() => Platform.openUrl('https://firefly.iota.org/privacy')}>
+        <Link onClick={() => openUrlInBrowser('https://firefly.iota.org/privacy')}>
             https://firefly.iota.org/privacy
         </Link>) for information on how we and our third-party service providers process data in relation to the App.
     </Text>
@@ -399,7 +399,7 @@
         This Privacy Policy is dedicated to the users of the App. If you would like to know more about how the IOTA
         Foundation (hereinafter "IOTA", "we", "us", "our") processes Personal Data collected and processed in connection
         with other services and activities offered by IOTA, please see IOTA's general Privacy Policy available at
-        <Link onClick={() => Platform.openUrl('https://www.iota.org/privacy-policy')}>
+        <Link onClick={() => openUrlInBrowser('https://www.iota.org/privacy-policy')}>
             https://www.iota.org/privacy-policy
         </Link>
         .
diff --git a/packages/shared/components/molecules/activity-info/GenericActivityInformation.svelte b/packages/shared/components/molecules/activity-info/GenericActivityInformation.svelte
index c7de3fc9e39..a6015b02f4c 100644
--- a/packages/shared/components/molecules/activity-info/GenericActivityInformation.svelte
+++ b/packages/shared/components/molecules/activity-info/GenericActivityInformation.svelte
@@ -5,7 +5,7 @@
     import { Activity, formatTokenAmountPrecise } from '@core/wallet'
     import { BASE_TOKEN, ExplorerEndpoint } from '@core/network'
     import { getOfficialExplorerUrl } from '@core/network/utils'
-    import { Platform } from '@core/app'
+    import { openUrlInBrowser } from '@core/app'
     import { truncateString } from '@core/utils'
     import { setClipboard } from '@core/utils'
 
@@ -68,7 +68,7 @@
 
     function handleTransactionIdClick(): void {
         explorerUrl
-            ? Platform.openUrl(
+            ? openUrlInBrowser(
                   `${explorerUrl}/${ExplorerEndpoint.Transaction}/${activity.asyncData?.claimingTransactionId}`
               )
             : setClipboard(activity.asyncData?.claimingTransactionId)
diff --git a/packages/shared/components/popups/ActivityDetailsPopup.svelte b/packages/shared/components/popups/ActivityDetailsPopup.svelte
index e8e2c6816e9..1fc67fb8fab 100644
--- a/packages/shared/components/popups/ActivityDetailsPopup.svelte
+++ b/packages/shared/components/popups/ActivityDetailsPopup.svelte
@@ -12,7 +12,7 @@
         NftActivityDetails,
         ActivityInformation,
     } from 'shared/components'
-    import { Platform } from '@core/app'
+    import { openUrlInBrowser } from '@core/app'
     import {
         ActivityAsyncStatus,
         ActivityDirection,
@@ -84,7 +84,7 @@
     }
 
     function handleExplorerClick(): void {
-        Platform.openUrl(`${explorerUrl}/${ExplorerEndpoint.Transaction}/${activity.transactionId}`)
+        openUrlInBrowser(`${explorerUrl}/${ExplorerEndpoint.Transaction}/${activity.transactionId}`)
     }
 
     function handleTransactionIdClick(): void {
diff --git a/packages/shared/components/popups/ConfirmationPopup.svelte b/packages/shared/components/popups/ConfirmationPopup.svelte
index 0c0dcbe5329..6fb9d4e152e 100644
--- a/packages/shared/components/popups/ConfirmationPopup.svelte
+++ b/packages/shared/components/popups/ConfirmationPopup.svelte
@@ -37,7 +37,7 @@
     </Text>
     <div class="space-y-4">
         {#if description}
-            <Text fontSize="14" classes="text-left">{description}</Text>
+            <Text fontSize="14" classes="text-left break-words">{description}</Text>
         {/if}
         {#if hint}
             <TextHint {info} {success} {warning} {danger} text={hint} />
diff --git a/packages/shared/components/popups/LedgerConnectionGuidePopup.svelte b/packages/shared/components/popups/LedgerConnectionGuidePopup.svelte
index 10b8a4773f7..21f3b3ccdf1 100644
--- a/packages/shared/components/popups/LedgerConnectionGuidePopup.svelte
+++ b/packages/shared/components/popups/LedgerConnectionGuidePopup.svelte
@@ -1,6 +1,6 @@
 <script lang="typescript">
     import { LedgerAnimation, Button, Link, Text } from 'shared/components'
-    import { Platform } from '@core/app'
+    import { openUrlInBrowser } from '@core/app'
     import { closePopup } from '@auxiliary/popup'
     import { localize } from '@core/i18n'
 
@@ -34,7 +34,7 @@
             <Link
                 classes="ml-0.5 inline-block text-13 leading-160"
                 onClick={() =>
-                    Platform.openUrl(
+                    openUrlInBrowser(
                         'https://support.ledger.com/hc/en-us/articles/360019868977-Fix-USB-connection-issues-with-Ledger-Live?support=true'
                     )}
             >
diff --git a/packages/shared/components/popups/LegalUpdate.svelte b/packages/shared/components/popups/LegalUpdate.svelte
index e8b0e7bf811..4e028b2d061 100644
--- a/packages/shared/components/popups/LegalUpdate.svelte
+++ b/packages/shared/components/popups/LegalUpdate.svelte
@@ -9,7 +9,7 @@
         needsToAcceptLatestPrivacyPolicy,
         TERMS_OF_SERVICE_VERSION,
         PRIVACY_POLICY_VERSION,
-        Platform,
+        openUrlInBrowser,
     } from '@core/app'
 
     const TOS_LINK = 'https://firefly.iota.org/terms'
@@ -20,11 +20,11 @@
     const privacyPolicy = needsToAcceptLatestPrivacyPolicy()
 
     function handleViewTosClick(): void {
-        Platform.openUrl(TOS_LINK)
+        openUrlInBrowser(TOS_LINK)
     }
 
     function handleViewPrivPolicyClick(): void {
-        Platform.openUrl(PRIVACY_POLICY_LINK)
+        openUrlInBrowser(PRIVACY_POLICY_LINK)
     }
 
     function handleConfirmClick(): void {
diff --git a/packages/shared/components/popups/Version.svelte b/packages/shared/components/popups/Version.svelte
index 68d4c4767bf..e48a0421832 100644
--- a/packages/shared/components/popups/Version.svelte
+++ b/packages/shared/components/popups/Version.svelte
@@ -10,9 +10,9 @@
         appVersionDetails,
         AppStage,
         appStage,
-        Platform,
         PlatformOption,
         platform,
+        openUrlInBrowser,
     } from '@core/app'
     import { formatDate, localize } from '@core/i18n'
     import { closePopup } from '@auxiliary/popup'
@@ -24,7 +24,7 @@
         if (hasAutoUpdate) {
             downloadAppUpdate()
         } else {
-            Platform.openUrl('https://firefly.iota.org')
+            openUrlInBrowser('https://firefly.iota.org')
         }
         closePopup()
     }
diff --git a/packages/shared/lib/core/app/constants/external-allowed-links.constant.ts b/packages/shared/lib/core/app/constants/external-allowed-links.constant.ts
new file mode 100644
index 00000000000..4d520ed8af8
--- /dev/null
+++ b/packages/shared/lib/core/app/constants/external-allowed-links.constant.ts
@@ -0,0 +1,24 @@
+export const externalAllowedLinks = [
+    // IOTA Foundation
+    'blog.iota.org',
+    'chrysalis.iota.org',
+    'chrysalis.docs.iota.org',
+    'discord.iota.org',
+    'firefly.iota.org',
+    'iota.org',
+    'privacy@iota.org',
+    'wiki.iota.org',
+    'explorer.iota.org',
+
+    // Assembly / Shimmer
+    'assembly.sc',
+    'shimmer.network',
+    'explorer.shimmer.network',
+
+    // GitHub
+    'github.com/iotaledger/firefly/issues',
+    'github.com/iotaledger/firefly/issues/new/choose',
+
+    // Other
+    'support.ledger.com',
+]
diff --git a/packages/shared/lib/core/app/constants/index.ts b/packages/shared/lib/core/app/constants/index.ts
index 1a8ee75c43f..65c8103d9e0 100644
--- a/packages/shared/lib/core/app/constants/index.ts
+++ b/packages/shared/lib/core/app/constants/index.ts
@@ -1,4 +1,5 @@
 export * from './app-updater-poll-interval.constant'
 export * from './default-app-settings.constant'
+export * from './external-allowed-links.constant'
 export * from './privacy-policy-version.constant'
 export * from './terms-of-service-version.constant'
diff --git a/packages/shared/lib/core/app/utils/index.ts b/packages/shared/lib/core/app/utils/index.ts
index 1eaf91deb7c..067629143de 100644
--- a/packages/shared/lib/core/app/utils/index.ts
+++ b/packages/shared/lib/core/app/utils/index.ts
@@ -2,5 +2,6 @@ export * from './checkForAppUpdate'
 export * from './installAppUpdate'
 export * from './needsToAcceptLatestPrivacyPolicy'
 export * from './needsToAcceptLatestTermsOfService'
+export * from './openUrlInBrowser'
 export * from './pollCheckForAppUpdate'
 export * from './shouldBeDarkMode'
diff --git a/packages/shared/lib/core/app/utils/openUrlInBrowser.ts b/packages/shared/lib/core/app/utils/openUrlInBrowser.ts
new file mode 100644
index 00000000000..6da5bc59562
--- /dev/null
+++ b/packages/shared/lib/core/app/utils/openUrlInBrowser.ts
@@ -0,0 +1,30 @@
+import { closePopup, openPopup } from '@auxiliary/popup'
+import { localize } from '@core/i18n'
+import { Platform } from '../classes/platform.class'
+import { externalAllowedLinks } from '../constants'
+
+export function openUrlInBrowser(targetUrl: string): void {
+    const url = new URL(targetUrl)
+    const domain = url.hostname.replace('www.', '').replace('mailto:', '')
+
+    const isAllowed = externalAllowedLinks.includes(domain) || externalAllowedLinks.includes(domain + url.pathname)
+
+    if (isAllowed) {
+        Platform.openUrl(targetUrl)
+    } else {
+        openPopup({
+            type: 'confirmation',
+            props: {
+                title: localize('popups.externalUrl.title'),
+                description: localize('popups.externalUrl.body', { values: { url: targetUrl } }),
+                hint: localize('popups.externalUrl.hint'),
+                warning: true,
+                confirmText: localize('popups.externalUrl.action'),
+                onConfirm: () => {
+                    Platform.openUrl(targetUrl)
+                    closePopup()
+                },
+            },
+        })
+    }
+}
diff --git a/packages/shared/locales/en.json b/packages/shared/locales/en.json
index e9356a62717..59b5ed2063f 100644
--- a/packages/shared/locales/en.json
+++ b/packages/shared/locales/en.json
@@ -700,6 +700,12 @@
             "errorTitle": "Unable to delete {name}",
             "errorBody1": "You cannot delete this wallet, you must have at least one."
         },
+        "externalUrl": {
+            "title": "Open URL in Browser",
+            "body": "Are you sure you want to open \"{url}\" in the browser?",
+            "hint": "This URL is unknown to Firefly. Please double check the URL before opening it.",
+            "action": "Open URL"
+        },
         "hideAccount": {
             "title": "Hide {name}?",
             "body": "You can find this wallet later by enabling \"Show hidden wallets\" in Advanced Settings.",