Skip to content
Ultimate Guide · 10 chapters

Get Emails from LinkedIn Profiles (9 Ways)

9 ways to look for someone's business email from a LinkedIn profile, including contact info, browser extensions, search operators, and verification.

On this page
  1. First: Understanding LinkedIn's Privacy Settings
  2. Method 1: Check the Contact Info Section (Free, 30 Seconds)
  3. Method 2: Use Overloop's Chrome Extension (Paid, Instant)
  4. Method 3: LinkedIn Data Export (Free, Slow)
  5. Method 4: Sales Navigator + Email Finder Combo (Paid)
  6. Method 5: Email Pattern Guessing + Verification (Free-ish)
  7. Method 6: Google Search Operators (Free, 2 Minutes)
  8. Method 7: Send a Direct Message on LinkedIn (Free, 1 Minute)
  9. Method 8: Check the Company Website (Free, 2 Minutes)
  10. Method 9: Find Emails from GitHub Commits (Free, Technical)
  11. Method Comparison
  12. Is It Legal to Get Emails from LinkedIn Profiles?
  13. LinkedIn Profile Viewing Limits
  14. Best LinkedIn Email Finder Tools Compared (2026)
  15. After You Get the Email: What Next?
  16. Frequently Asked Questions

Getting an email from a LinkedIn profile takes one of 9 paths: contact info section, Sales Navigator export, Chrome extensions like Overloop or Hunter, dedicated finders, pattern guessing with email verifiers, X-ray Google search, the "Find Email" feature on Apollo, mutual connections, or asking directly via InMail. At scale, a LinkedIn finder can combine prospect search with a separate email-checking step.

To get an email from a LinkedIn profile, click "Contact info" below their headline to check if they share it publicly. If not, use a Chrome extension like Overloop to look up their verified business email from external databases, or try Google search operators, LinkedIn data export, email pattern guessing, or a direct message. Below are all nine methods, ranked by reliability. To build the prospect list first, use LinkedIn boolean search to surface the right profiles.

LinkedIn profiles often provide a job title, company, and location, but an email address may be hidden by privacy settings or absent altogether. This guide compares nine practical paths, what each one can and cannot establish, and where a separate verification step is still needed.

First: Understanding LinkedIn's Privacy Settings

Before you try any method, know what you are up against. LinkedIn gives users three visibility levels for their email: [CNIL]

This matters because Method 1 only works if the person has not locked down their settings. Methods 2-9 work regardless of their privacy choices. Pairing extraction with automation? Our LinkedIn Helper review covers the safety limits.

Settings & Privacy › Visibility
Edit your profile › Contact info
Control who can see your email address on your profile

Method 1: Check the Contact Info Section (Free, 30 Seconds)

The simplest approach. Go to the person's LinkedIn profile and look for the "Contact info" link just below their name and headline. [LinkedIn]

Step by step:

  1. Navigate to the person's LinkedIn profile.
  2. Below their profile photo and headline, look for a small link or icon labeled "Contact info."
  3. Click it. A popup appears showing whatever contact details they have shared: email, phone, website, Twitter handle.
  4. If their email is listed, copy it. You are done.
Contact info
Email
Phone
+1 (555) 123-4567
Website
Twitter

What to expect: This is most useful for first-degree connections who chose to share an address. If the field is absent, LinkedIn has not supplied an email to use.

Limitation: You need to be logged into LinkedIn, and many users only share with 1st-degree connections. If you are not connected, you will likely see nothing.

Bonus: Also scan the person's "About" section. Founders, consultants, and freelancers often drop their email directly in their bio or summary text because they want inbound leads.

Method 2: Use Overloop's Chrome Extension (Paid, Instant)

Overloop offers a Chrome extension that can add prospects from LinkedIn into Overloop. Depending on the available data, the resulting prospect record may include a work-email candidate and verification status; review both before outreach. This capability is documented on Overloop's official features page.

Step by step:

  1. Install the Overloop Chrome extension from the Chrome Web Store.
  2. Navigate to any LinkedIn profile.
  3. Open the extension and add the profile as a prospect in Overloop.
  4. Review which contact fields were returned and any verification status shown; availability varies by profile.
  5. Add an eligible, reviewed prospect to the appropriate Overloop campaign when you have a lawful reason to contact them.

What to expect: No universal coverage rate is published for this workflow. Results vary by company, geography, role, data recency, and domain type.

Overloop Chrome Extension
JS
John Smith
VP Sales at Acme Corp
Verified
john.smith@acme-corp.com

Why teams use it: It reduces manual transfer between a LinkedIn profile and an outbound workspace. The contact data comes from the provider's data workflow rather than a hidden LinkedIn email field, so it still needs to be reviewed before use.

Method 3: LinkedIn Data Export (Free, Slow)

LinkedIn lets you download an archive of all your connection data. This archive includes email addresses for connections who shared them. [LinkedIn]

Step by step:

  1. Go to LinkedIn Settings (click your profile photo > Settings & Privacy).
  2. Navigate to "Data privacy" in the left sidebar.
  3. Click "Get a copy of your data."
  4. Select "Connections" (you do not need the full archive).
  5. Click "Request archive."
  6. Wait 24-72 hours. LinkedIn will email you a download link.
  7. Download the ZIP file. Inside, open "Connections.csv."
  8. The CSV contains columns for First Name, Last Name, Email Address, Company, Position, and Connected On date.

What to expect: The export only includes addresses that connections chose to share with you, so coverage varies substantially by network.

Best for: Reviewing contact details already shared by existing connections, not discovering hidden addresses.

Settings & Privacy › Data privacy
Get a copy of your data
Pick the data you want to download. We'll email you a link when it's ready.

Limitation: Only works for people you are already connected with. Not useful for new prospects.

Method 4: Sales Navigator + Email Finder Combo (Paid)

LinkedIn Sales Navigator gives you advanced search and filtering, but it deliberately does not show email addresses (LinkedIn wants you to use InMail). The workaround: use Sales Navigator to build your prospect list, then run those names through an email finder.

Step by step:

  1. Use Sales Navigator's lead search to find prospects matching your criteria (industry, company size, title, geography).
  2. Save leads to a list within Sales Navigator.
  3. For each lead, note their full name and current company.
  4. Run those name+company pairs through Overloop's bulk email finder or another tool like Hunter.io.
  5. The email finder cross-references company email patterns and public data to return verified addresses.

Product note: Overloop's extension can add prospects while you work from LinkedIn; confirm the current supported LinkedIn and Sales Navigator workflow on the official features page.

What to expect: Sales Navigator improves targeting, not email coverage. The finder, target segment, and verification status determine whether a usable address is returned.

Method 5: Email Pattern Guessing + Verification (Free-ish)

If you know the person's name (from their LinkedIn profile) and their company domain, you can guess their email pattern and verify it.

Step by step:

  1. From the LinkedIn profile, note the person's full name and current company.
  2. Find the company's domain (usually visible on the LinkedIn company page or a quick Google search).
  3. Generate email permutations: firstname.lastname@domain.com, firstname@domain.com, flastname@domain.com, etc.
  4. Run each permutation through an email verification tool. Overloop's verifier, NeverBounce, or ZeroBounce all work.
  5. The verifier pings the mail server (SMTP check) and tells you which address is valid.

What to expect: Pattern guessing only helps when the company uses a consistent format. Catch-all domains can prevent a verifier from confirming a single mailbox.

Best for: One-off lookups when you do not want to pay for a tool. Not practical for more than 10-20 lookups per day.

Need to find a prospect's email right now?

Overloop's Email Finder combines prospect search with an SMTP-checking step. Review catch-all and risky results before sending.

Try free →Book a demo

Common email format patterns by company size

Pattern Example How Common
firstname.lastname@ john.smith@acme.com ~50% of companies (most common)
firstname@ john@acme.com ~15% (startups, small teams)
flastname@ jsmith@acme.com ~12% (enterprise, legacy)
firstnamelastname@ johnsmith@acme.com ~10%
firstname_lastname@ john_smith@acme.com ~5%
first.l@ john.s@acme.com ~4%
lastname.firstname@ smith.john@acme.com ~3% (common in Europe)

Start with firstname.lastname@ and work down the list. Two or three guesses usually get you there.

Method 6: Google Search Operators (Free, 2 Minutes)

Google indexes a surprising amount of contact information. Combine the person's name from their LinkedIn profile with search operators to surface their email from other corners of the web.

Step by step:

  1. Copy the person's full name and current company from their LinkedIn profile.
  2. Go to Google and try these searches:
    • "John Smith" "acme.com" email
    • "John Smith" "@acme.com"
    • site:acme.com "John Smith" contact
    • "John Smith" acme filetype:pdf (conference slides and whitepapers often list emails)
  3. Check the first 2-3 pages of results. Look for speaker bios, press releases, old blog posts, conference programs, and PDF documents where the person was listed as a contact.
"John Smith" "@acme-corp.com"
About 3 results (0.42 seconds)
https://www.acme-corp.com › team
Our Team - Acme Corp
... VP Sales John Smith leads our enterprise sales division. Contact: john.smith@acme-corp.com | Based in New York ...
https://www.salesconference2025.com › speakers
SalesConf 2026 - Speaker Bios
... John Smith, VP Sales at Acme Corp, will present "Scaling Outbound." Reach him at john.smith@acme-corp.com ...
https://www.techblog.com › author › john-smith
John Smith - Author at TechBlog
... John Smith writes about B2B sales strategy. VP Sales @ Acme Corp. john.smith@acme-corp.com ...

What to expect: Public-web discovery is inconsistent, but it is more useful for people whose work appears on event pages, podcasts, press releases, or public profiles.

Best for: C-level executives who appear at conferences, on podcasts, or in press releases. Their emails are scattered across the web even if LinkedIn hides them.

Pro tip: Try adding site:twitter.com or site:github.com to the search. Developers and technical founders often have their email in their Twitter bio or GitHub profile.

Method 7: Send a Direct Message on LinkedIn (Free, 1 Minute)

Sometimes the simplest path is the most overlooked. Just ask.

Step by step:

  1. Send a connection request with a short, relevant note. Do not pitch. Just reference something specific from their profile.
  2. Once connected, send a message like: "Thanks for connecting. I have something relevant to share about [topic from their profile]. What is the best email to reach you at?"
  3. If you are not connected, use InMail (requires Premium or Sales Navigator) or engage with their posts first to warm up the relationship.

What to expect: Response depends on relevance, relationship, and message quality. An address shared directly by the recipient is clearer evidence of permission to continue the conversation than a guessed address.

Best for: High-value prospects where personalization matters more than volume. Enterprise deals, partnership outreach, recruiting.

Warning: Avoid repetitive bulk messaging. Follow LinkedIn's current limits and respond to any in-product warning or restriction.

Method 8: Check the Company Website (Free, 2 Minutes)

Company websites leak email addresses constantly. Team pages, "About us" sections, press pages, and job postings all list contact information that you will not find on LinkedIn.

Step by step:

  1. From the LinkedIn profile, click through to the person's company page and find the website URL.
  2. Check these pages in order:
    • /about or /team - Many companies list team members with their emails
    • /contact - Sometimes lists individual department emails
    • /press or /newsroom - Press contacts are almost always listed with direct emails
    • Blog author pages - If your prospect writes blog posts, their author bio may include an email
  3. If you find any email at the company (like info@ or a colleague's address), you now know the email format. Apply it to your prospect's name.

What to expect: Coverage depends on what the company publishes. Team, press, and contact pages are the most relevant places to check.

Best for: Prospects at startups and SMBs where team pages tend to be detailed.

Method 9: Find Emails from GitHub Commits (Free, Technical)

This one is niche but powerful for reaching developers, CTOs, and technical founders. Every Git commit contains the author's email address, and most GitHub repos are public.

Step by step:

  1. From the LinkedIn profile, check if the person links to their GitHub account (under Contact info or in their bio).
  2. If not, search Google: "firstname lastname" site:github.com
  3. Go to their GitHub profile and open any repository they have committed to.
  4. Add .patch to the end of any commit URL. Example: https://github.com/user/repo/commit/abc123.patch
  5. The patch file shows the commit author's email in the header: From: John Smith <john@acme.com>
  6. Alternatively, append /commits?author=username to any repo URL, then check individual commit details.

What to expect: This only works when a public commit exposes a usable address; many contributors use GitHub's privacy-preserving noreply address.

Best for: Checking contact information that technical prospects intentionally exposed through public development activity.

Limitation: Only works for people active on GitHub. Some developers use a noreply@github.com alias for commits.

Method Comparison

Method Cost Speed What to expect Works Without Connection?
Contact Info section Free 30 sec Only when shared Rarely
Overloop Chrome Extension Starter $69/user/mo · 250 credits Instant Coverage varies; review status Yes
LinkedIn Data Export Free 24-72h Shared connection data only No
Sales Nav + Email Finder $99+/mo Minutes Finder-dependent Yes
Pattern guessing + verification Free 5-10 min Domain-dependent Yes
Google search operators Free 2 min Inconsistent Yes
Direct message Free 1-3 days Recipient-dependent Partial (InMail)
Company website Free 2 min Public listings only Yes
GitHub commits Free 3 min Public commit email only Yes

Short answer: legality depends on how the address was obtained, your jurisdiction, your purpose, and what you do with it. Public availability is not blanket permission for every use.

LinkedIn's Terms of Service: LinkedIn prohibits scraping, meaning bots that crawl thousands of profiles automatically and extract data. Using a Chrome extension that enriches profiles you manually visit is different. You are browsing LinkedIn normally, and the extension looks up the email from external databases, not from LinkedIn itself. The 2022 US appeals court ruling in hiQ Labs v. LinkedIn confirmed that scraping publicly available data does not violate the Computer Fraud and Abuse Act, but LinkedIn can still restrict access through its ToS.

GDPR (Europe): If you are reaching out to prospects in the EU, you need a lawful basis for processing their email. For B2B outreach, "legitimate interest" (Article 6(1)(f)) typically applies, meaning you have a genuine business reason to contact them and the outreach is relevant. You must still include an unsubscribe option in every email and honor opt-out requests within 30 days.

CAN-SPAM (US): You can send unsolicited B2B email in the US, but every message must include your physical address, a clear unsubscribe mechanism, and accurate sender information. No false headers, no misleading subject lines. Penalties go up to $51,744 per violation.

CASL (Canada): Canada is stricter. You generally need implied or express consent to email someone. Implied consent exists if the recipient's email was publicly listed for business purposes (like on a company website), but this is a gray area. When in doubt, get explicit permission first.

LinkedIn does not publish one universal safe profile-view allowance. Follow its current terms, use the product manually, and slow down or stop if LinkedIn shows a warning or restriction.

LinkedIn Profile Viewing Limits

Account history, browsing pattern, automation signals, and LinkedIn's evolving controls can all affect restrictions.

Best LinkedIn Email Finder Tools Compared (2026)

If you want to go beyond free methods, compare these tools by workflow, documented data sources, verification labels, export options, and current pricing. This table is a product snapshot, not a hands-on accuracy ranking.

Tool Database Size Chrome Extension Starting Price Best For
Overloop logoOverloop 450M+ contacts Yes Starter $69/user/mo · 250 credits Full outbound workflow (find + sequence + send)
Hunter.io logoHunter.io 100M+ contacts Yes Free (25/mo), $49/mo Domain-based email search
Kaspr 500M+ phone & email Yes Free (5/mo), $49/mo Phone numbers + emails from LinkedIn
Lusha logoLusha 100M+ contacts Yes Free (5/mo), $36/mo Quick lookups with CRM integration
Skrapp.io 150M+ contacts Yes Free (100/mo), $49/mo LinkedIn email extraction at scale
GetProspect 200M+ contacts Yes Free (50/mo), $49/mo B2B lead lists with email and company data

Coverage and verification status vary by provider and target segment. Workflow also matters: Overloop can move a reviewed prospect into an outreach campaign, while some finder-first tools require an export or a separate sending product.

After You Get the Email: What Next?

Having the email is step one. Here is what matters next:

  1. Verify before sending. Even if a tool says the email is valid, run it through verification. Catch-all domains are tricky. Our email verification guide walks through the full SMTP-check process.
  2. Personalize the email. You just visited their LinkedIn profile. Use what you learned. Mention their recent post, their company's latest news, their job change. Anything specific.
  3. Do not blast. Send 20-30 emails per day from a new domain. Warm up over 2-3 weeks before scaling.
  4. Follow up. 80% of replies come from follow-ups, not the first email. Send 3-4 follow-ups spaced 3-5 days apart.

The same playbook lets you find anyone's email address, not just LinkedIn contacts. For a broader look at every way to find a professional email, check our complete guide to finding someone's email address. If you only have an email and want to work backwards to a name and company, our reverse email lookup guide covers that.

If you want to automate LinkedIn outreach alongside email, see our roundup of the best AI LinkedIn outreach tools and our LinkedIn outreach playbook.

Stop losing prospects to bad data.

Try Overloop's Email Finder free or book a demo to see it inside a full multichannel sequence.

Start with Overloop →See a demo

Frequently Asked Questions

How can I get someone's email from their LinkedIn profile for free?

Three free methods to try are: (1) check "Contact info" for an address the person chose to share, (2) search the public web for the person's name and company domain, and (3) infer a likely company pattern and verify the candidate before use. A LinkedIn connection export may also contain addresses that connections chose to share; coverage varies by network.

Is it legal to find email addresses from LinkedIn?

It depends on how the address was obtained, the jurisdiction, the purpose, and the subsequent outreach. LinkedIn's terms restrict automated scraping, while privacy and marketing rules such as GDPR, CAN-SPAM, and CASL impose different obligations. Public availability is not blanket permission for every use, so obtain legal advice for your situation.

What is the best Chrome extension to find emails on LinkedIn?

Overloop, Hunter.io, Kaspr, and Lusha offer browser-assisted workflows around LinkedIn profiles. Overloop's extension can add a prospect from LinkedIn to Overloop so the returned contact data can be reviewed before outreach. Coverage, verification status, and available fields vary by prospect and provider.

Can I find someone's email on LinkedIn without being connected?

Yes. The built-in "Contact info" section usually requires a 1st-degree connection, but external tools like Overloop, Hunter.io, and Kaspr do not depend on your connection status. They pull email data from their own databases. You can also use Google search operators, check the company website, or look at GitHub commit history to find emails without any LinkedIn connection.

How do I find someone's email from their name and company?

Build a small set of plausible addresses from the person's name and company domain, then run each candidate through an email verification tool. Pattern guessing is less useful on catch-all domains, and no candidate should be treated as confirmed solely because it matches a common format.

How many LinkedIn profiles can I view per day without getting restricted?

LinkedIn does not publish one universal daily profile-view allowance. Restrictions can depend on account type, usage pattern, automation signals, and other risk controls. Follow LinkedIn's current terms and in-product warnings instead of treating a third-party number as a safe limit.

What is the success rate of LinkedIn email finder tools?

There is no universal, independently verified success rate for LinkedIn email finders. Coverage varies by provider, geography, company type, recency of the data, and whether a domain is catch-all. Review each result's verification status and measure usable coverage on your own target segment.

Do I need LinkedIn Sales Navigator to find emails?

No. Sales Navigator helps you build targeted prospect lists with advanced filters (industry, headcount, role, geography), but it deliberately hides email addresses. You still need an email finder tool to get the actual address. If you only need a few emails, the free methods (Contact info check, Google operators, pattern guessing) work without any paid LinkedIn subscription.

What is the fastest way to find an email from a LinkedIn profile?

A browser extension is often the quickest workflow because it can look up contact data while you view a profile. Overloop offers an extension that can add prospects from LinkedIn into Overloop; review the returned fields and verification status before outreach. Contact info and public-web searches require more manual steps but do not require a paid finder.

Can I find anyone's email address from LinkedIn alone?

Not from LinkedIn alone in most cases. A profile can provide a name, company, and role, while the address usually comes from information the person shared, an external data provider, a public-web search, or a pattern candidate that still needs verification. No provider can guarantee coverage for every profile.

Methodology & sources6 sources

How this edition was evaluated

For this edition, we reviewed the product criteria and sources discussed on the page. Use the article date and linked primary sources to verify current details.

  • Product scope: current vendor documentation and the capabilities relevant to this edition.
  • Available access: public pages, trial behavior, or hands-on access only where the article identifies it.
  • Deliverability claims: vendor-reported figures kept separate from cited independent evidence.
  • Pricing snapshot: public prices and disclosed add-ons tied to the article date.
  • Privacy review: DPA, subprocessors, processing regions, and safeguards where documentation is available.
  • Editorial fit: recommendations labeled as judgment, with Overloop ownership disclosed.

Read the methodology for this edition, and check the article date plus linked primary sources before relying on current pricing or product details.