Products & services - NCSC.GOV.UK

Data breaches: guidance for individuals and families - NCSC.GOV.UK

Recovering a hacked account - NCSC.GOV.UK

CYBERUK - NCSC.GOV.UK

To SOC or not to SOC ? - NCSC.GOV.UK

ACD - The Sixth Year - NCSC.GOV.UK

Early Warning - NCSC.GOV.UK

NCSC RSS feeds - NCSC.GOV.UK

New guidance on shadow or grey IT in organisations - NCSC.GOV.UK

CyberFirst: How to stay secure online (11-14 year olds) - NCSC.GOV.UK

Avoid opening links in a new tab or window. Where you must do this, include an explanation
in the text of the link.

## Why this matters

Opening links in a new tab or window breaks the back button and can be disorientating for 
novice web users, and the visually impaired. Generally you should avoid opening links in a
new tab or window, but if you have to, you should include text explaining that this will happen.

## How to fix

An explanation must be clear in the accessible text for the link. For example:

```html
<a href="products.html" target="_blank">
    Products (opens in new window)
</a>
```

Or, for an image inside a link:

```html
<a href="products.html" target="_blank">
    <img src="products.jpg" alt="Products (opens in new window)">
</a>
```

Rather than updating all of your links manually to do this, you can add a simple CSS
selector, such as:

```css
a[target="_blank"]:after {
    content: " (opens in new window)";
}
```

Note that doing this with an icon, is not sufficient to pass this check. The text must be
readable by screen readers.

Alternatively you can override the link text for accessible technologies (like screenreaders),
so that the appearance of the link does not change. For example:

```html
<a href="products.html" target="_blank" aria-label="Products (opens in new window)">
    Products
</a>
```

Note that if you do this, the `aria-label` will replace the text content of the link completely,
so it must still make sense in isolation.

## Terminology

Although it is common to say "opens in new window", almost all browsers now use tabs, and
so this terminology is potentially confusing. You may prefer: "opens in new tab".

## Methodology

1. Silktide considers all links on a page with a `target` attribute of `_blank`.
2. For each link, Silktide considers the screen-readable text of the link, which includes:
   * The text content of the link
   * Any `alt` text inside any images inside the link
   * Any `aria-label` or `aria-labelled-by` text
   * The `content` of the pseudo-elements `:before` and `:after`
3. This text is analysed for the presence of common text, including "opens new tab"
    and "opens new window". If the text is not found, the link fails the test.

## Further reading

Generally best practice is to avoid opening links in a new tab or window.  

The W3C provides detailed guidance on 
[when opening a link in a new window may be appropriate](https://www.w3.org/TR/WCAG20-TECHS/G200.html).

link-text-explains-open-in-new-window

June 2025

May 2025

The National Cyber Security Centre

Title / URL	Issues
Products & services - NCSC.GOV.UKwww.ncsc.gov.uk/section/products-services/introduction	24
Data breaches: guidance for individuals and families - NCSC.GOV.UKwww.ncsc.gov.uk/guidance/data-breaches	20
Recovering a hacked account - NCSC.GOV.UKwww.ncsc.gov.uk/guidance/recovering-a-hacked-account	16
CYBERUK - NCSC.GOV.UKwww.ncsc.gov.uk/section/keep-up-to-date/cyberuk	16
To SOC or not to SOC ? - NCSC.GOV.UKwww.ncsc.gov.uk/blog-post/soc-or-not	16
ACD - The Sixth Year - NCSC.GOV.UKwww.ncsc.gov.uk/report/acd-the-sixth-year	16
Early Warning - NCSC.GOV.UKwww.ncsc.gov.uk/information/early-warning-service	16
NCSC RSS feeds - NCSC.GOV.UKwww.ncsc.gov.uk/information/rss-feeds	14
New guidance on shadow or grey IT in organisations - NCSC.GOV.UKwww.ncsc.gov.uk/blog-post/spotlight-on-shadow-it	14
CyberFirst: How to stay secure online (11-14 year olds) - NCSC.GOV.UKwww.ncsc.gov.uk/collection/cyberfirst1114	14

Ensure links explain they open in a new tab

The National Cyber Security Centre

Where this issue has occurred