Setting up urlscan.io

urlscan.io opens a link in its own sandbox browser, never yours, and shows you a screenshot of where it lands, the final address, and whether it's known to be malicious. Free.

Click Sandbox scan on any link and follow the steps in the panel:

1. Click Create a free urlscan.io account (or sign in).
2. Click Settings & API, then New API key.
3. Copy the key, which looks like 1a2b3c4d-… (36 characters with dashes).
4. Paste it into Unmask and click Save & test.

Free limits: 50 private scans per day, at no cost. Going over just pauses scans until the next day. See Free limits and costs.

A scan takes 10 to 30 seconds. Every scan is private: only your urlscan.io key can see its result and screenshot; it never appears in urlscan's public feed or search, or in urlscan Pro for its security partners. The screenshot is fetched with your key and shown in the Links tab, with Save screenshot to keep a copy, and where the link lands is added to the report and exports.

---

This page is generated from docs/USER_GUIDE.md. Edit it there, not in the wiki.