TL;DR
To get someone's email from their LinkedIn profile, check "Contact info" below their headline, use a Chrome extension like Overloop or Hunter.io, or try Google search operators ("name" "@company.com"). About 30% of LinkedIn users share their email with 1st-degree connections. For the rest, external tools pull email data from their own databases regardless of connection status. This guide covers 9 methods ranked by reliability, from free manual approaches to paid tools with verification.
To get an email from a LinkedIn profile, click "Contact info" below their headline to check if they share it publicly. If not, use a Chrome extension like Overloop to look up their verified business email from external databases, or try Google search operators, LinkedIn data export, email pattern guessing, or a direct message. Below are all nine methods, ranked by reliability.
LinkedIn has 1 billion members. Most list their job title, company, and location. But the one thing you actually need to start a conversation outside LinkedIn, their email address, is locked behind privacy settings, connection gates, and deliberate obscurity. I have spent years building outbound systems that start on LinkedIn and end in the inbox. Here is every method that works in 2026.
First: Understanding LinkedIn's Privacy Settings
Before you try any method, know what you are up against. LinkedIn gives users three visibility levels for their email:
- Visible to everyone - rare. Maybe 5-10% of users.
- Visible to connections - the default. About 30% of users share email with their 1st-degree network.
- Visible to no one - the person has turned off email visibility entirely.
This matters because Method 1 only works if the person has not locked down their settings. Methods 2-9 work regardless of their privacy choices.
Method 1: Check the Contact Info Section (Free, 30 Seconds)
The simplest approach. Go to the person's LinkedIn profile and look for the "Contact info" link just below their name and headline.
Step by step:
- Navigate to the person's LinkedIn profile.
- Below their profile photo and headline, look for a small link or icon labeled "Contact info."
- Click it. A popup appears showing whatever contact details they have shared: email, phone, website, Twitter handle.
- If their email is listed, copy it. You are done.
Success rate: About 30% for 1st-degree connections. Under 10% for 2nd or 3rd degree.
Limitation: You need to be logged into LinkedIn, and many users only share with 1st-degree connections. If you are not connected, you will likely see nothing.
Bonus: Also scan the person's "About" section. Founders, consultants, and freelancers often drop their email directly in their bio or summary text because they want inbound leads.
Method 2: Use Overloop's Chrome Extension (Paid, Instant)
This is the method I use daily. Overloop's Chrome extension sits in your browser and adds an overlay to LinkedIn profiles. When you visit someone's profile, it searches our database of 450M+ contacts and shows you their verified email address right on the page.
Step by step:
- Install the Overloop Chrome extension from the Chrome Web Store.
- Navigate to any LinkedIn profile.
- The extension icon lights up. Click it to reveal the person's email.
- The email is verified in real-time against SMTP servers. If it is valid, you see a green checkmark.
- Click "Add to campaign" to push them directly into an Overloop outreach sequence. No copy-pasting into spreadsheets.
Success rate: 85-90% for professionals at companies with 10+ employees. Lower for freelancers and very small businesses.
Why this works better than manual methods: The extension does not depend on LinkedIn's privacy settings. It cross-references multiple data sources (company email patterns, public records, previous verifications) to find the address independently of what LinkedIn shows.
Method 3: LinkedIn Data Export (Free, Slow)
LinkedIn lets you download an archive of all your connection data. This archive includes email addresses for connections who shared them.
Step by step:
- Go to LinkedIn Settings (click your profile photo > Settings & Privacy).
- Navigate to "Data privacy" in the left sidebar.
- Click "Get a copy of your data."
- Select "Connections" (you do not need the full archive).
- Click "Request archive."
- Wait 24-72 hours. LinkedIn will email you a download link.
- Download the ZIP file. Inside, open "Connections.csv."
- The CSV contains columns for First Name, Last Name, Email Address, Company, Position, and Connected On date.
Success rate: You get emails for roughly 30-40% of your connections. The rest will have blank email fields.
Best for: Bulk export of existing connections. If you have 2,000+ LinkedIn connections, this can yield 600-800 email addresses in one shot.
Limitation: Only works for people you are already connected with. Not useful for new prospects.
Method 4: Sales Navigator + Email Finder Combo (Paid)
LinkedIn Sales Navigator gives you advanced search and filtering, but it deliberately does not show email addresses (LinkedIn wants you to use InMail). The workaround: use Sales Navigator to build your prospect list, then run those names through an email finder.
Step by step:
- Use Sales Navigator's lead search to find prospects matching your criteria (industry, company size, title, geography).
- Save leads to a list within Sales Navigator.
- For each lead, note their full name and current company.
- Run those name+company pairs through Overloop's bulk email finder or another tool like Hunter.io.
- The email finder cross-references company email patterns and public data to return verified addresses.
Pro tip: Overloop's Chrome extension works directly on Sales Navigator pages. You do not need to visit each person's full profile. The extension detects names on Sales Navigator search results and can enrich them in bulk.
Success rate: 80-90% when combining Sales Navigator targeting with a good email finder.
Method 5: Email Pattern Guessing + Verification (Free-ish)
If you know the person's name (from their LinkedIn profile) and their company domain, you can guess their email pattern and verify it.
Step by step:
- From the LinkedIn profile, note the person's full name and current company.
- Find the company's domain (usually visible on the LinkedIn company page or a quick Google search).
- Generate email permutations: firstname.lastname@domain.com, firstname@domain.com, flastname@domain.com, etc.
- Run each permutation through an email verification tool. Overloop's verifier, NeverBounce, or ZeroBounce all work.
- The verifier pings the mail server (SMTP check) and tells you which address is valid.
Success rate: 60-70%. Fails on catch-all domains where the server accepts everything.
Best for: One-off lookups when you do not want to pay for a tool. Not practical for more than 10-20 lookups per day.
Common email format patterns by company size
| Pattern | Example | How Common |
|---|---|---|
| firstname.lastname@ | john.smith@acme.com | ~50% of companies (most common) |
| firstname@ | john@acme.com | ~15% (startups, small teams) |
| flastname@ | jsmith@acme.com | ~12% (enterprise, legacy) |
| firstnamelastname@ | johnsmith@acme.com | ~10% |
| firstname_lastname@ | john_smith@acme.com | ~5% |
| first.l@ | john.s@acme.com | ~4% |
| lastname.firstname@ | smith.john@acme.com | ~3% (common in Europe) |
Start with firstname.lastname@ and work down the list. Two or three guesses usually get you there.
Method 6: Google Search Operators (Free, 2 Minutes)
Google indexes a surprising amount of contact information. Combine the person's name from their LinkedIn profile with search operators to surface their email from other corners of the web.
Step by step:
- Copy the person's full name and current company from their LinkedIn profile.
- Go to Google and try these searches:
"John Smith" "acme.com" email"John Smith" "@acme.com"site:acme.com "John Smith" contact"John Smith" acme filetype:pdf(conference slides and whitepapers often list emails)
- Check the first 2-3 pages of results. Look for speaker bios, press releases, old blog posts, conference programs, and PDF documents where the person was listed as a contact.
Success rate: 20-40%. Higher for executives, speakers, and people active in public forums.
Best for: C-level executives who appear at conferences, on podcasts, or in press releases. Their emails are scattered across the web even if LinkedIn hides them.
Pro tip: Try adding site:twitter.com or site:github.com to the search. Developers and technical founders often have their email in their Twitter bio or GitHub profile.
Method 7: Send a Direct Message on LinkedIn (Free, 1 Minute)
Sometimes the simplest path is the most overlooked. Just ask.
Step by step:
- Send a connection request with a short, relevant note. Do not pitch. Just reference something specific from their profile.
- Once connected, send a message like: "Thanks for connecting. I have something relevant to share about [topic from their profile]. What is the best email to reach you at?"
- If you are not connected, use InMail (requires Premium or Sales Navigator) or engage with their posts first to warm up the relationship.
Success rate: 15-25% response rate. But the emails you get this way are the highest quality because the person has opted in.
Best for: High-value prospects where personalization matters more than volume. Enterprise deals, partnership outreach, recruiting.
Warning: Do not send the same template to 100 people. LinkedIn will throttle your messaging if the response rate drops below ~20%.
Method 8: Check the Company Website (Free, 2 Minutes)
Company websites leak email addresses constantly. Team pages, "About us" sections, press pages, and job postings all list contact information that you will not find on LinkedIn.
Step by step:
- From the LinkedIn profile, click through to the person's company page and find the website URL.
- Check these pages in order:
- /about or /team - Many companies list team members with their emails
- /contact - Sometimes lists individual department emails
- /press or /newsroom - Press contacts are almost always listed with direct emails
- Blog author pages - If your prospect writes blog posts, their author bio may include an email
- If you find any email at the company (like info@ or a colleague's address), you now know the email format. Apply it to your prospect's name.
Success rate: 30-50%. Small and mid-sized companies are more likely to list team emails than enterprise companies.
Best for: Prospects at startups and SMBs where team pages tend to be detailed.
Method 9: Find Emails from GitHub Commits (Free, Technical)
This one is niche but powerful for reaching developers, CTOs, and technical founders. Every Git commit contains the author's email address, and most GitHub repos are public.
Step by step:
- From the LinkedIn profile, check if the person links to their GitHub account (under Contact info or in their bio).
- If not, search Google:
"firstname lastname" site:github.com - Go to their GitHub profile and open any repository they have committed to.
- Add
.patchto the end of any commit URL. Example:https://github.com/user/repo/commit/abc123.patch - The patch file shows the commit author's email in the header:
From: John Smith <john@acme.com> - Alternatively, append
/commits?author=usernameto any repo URL, then check individual commit details.
Success rate: 70-80% for developers who contribute to public repos. Many use their work email for commits.
Best for: Reaching engineers, CTOs, DevOps leads, and open-source contributors. This method is underused and gives you emails that no Chrome extension will find.
Limitation: Only works for people active on GitHub. Some developers use a noreply@github.com alias for commits.
Method Comparison
| Method | Cost | Speed | Success Rate | Works Without Connection? |
|---|---|---|---|---|
| Contact Info section | Free | 30 sec | ~30% | Rarely |
| Overloop Chrome Extension | From $49/mo | Instant | 85-90% | Yes |
| LinkedIn Data Export | Free | 24-72h | 30-40% | No |
| Sales Nav + Email Finder | $99+/mo | Minutes | 80-90% | Yes |
| Pattern guessing + verification | Free | 5-10 min | 60-70% | Yes |
| Google search operators | Free | 2 min | 20-40% | Yes |
| Direct message | Free | 1-3 days | 15-25% | Partial (InMail) |
| Company website | Free | 2 min | 30-50% | Yes |
| GitHub commits | Free | 3 min | 70-80% | Yes |
Is It Legal to Get Emails from LinkedIn Profiles?
Short answer: finding publicly available email addresses is legal. Scraping LinkedIn with bots is not.
LinkedIn's Terms of Service: LinkedIn prohibits scraping, meaning bots that crawl thousands of profiles automatically and extract data. Using a Chrome extension that enriches profiles you manually visit is different. You are browsing LinkedIn normally, and the extension looks up the email from external databases, not from LinkedIn itself. The 2022 US appeals court ruling in hiQ Labs v. LinkedIn confirmed that scraping publicly available data does not violate the Computer Fraud and Abuse Act, but LinkedIn can still restrict access through its ToS.
GDPR (Europe): If you are reaching out to prospects in the EU, you need a lawful basis for processing their email. For B2B outreach, "legitimate interest" (Article 6(1)(f)) typically applies, meaning you have a genuine business reason to contact them and the outreach is relevant. You must still include an unsubscribe option in every email and honor opt-out requests within 30 days.
CAN-SPAM (US): You can send unsolicited B2B email in the US, but every message must include your physical address, a clear unsubscribe mechanism, and accurate sender information. No false headers, no misleading subject lines. Penalties go up to $51,744 per violation.
CASL (Canada): Canada is stricter. You generally need implied or express consent to email someone. Implied consent exists if the recipient's email was publicly listed for business purposes (like on a company website), but this is a gray area. When in doubt, get explicit permission first.
That said, do not go wild with profile browsing. If you visit 500 profiles in an hour, LinkedIn will flag your account regardless of how you are doing it. Keep your daily profile views under 100-150 for a free account, 200-300 for Sales Navigator.
LinkedIn Profile Viewing Limits
- Free LinkedIn: ~100 profile views per day before you get throttled
- LinkedIn Premium: ~150-200 profile views per day
- Sales Navigator: ~250-300 profile views per day
These are not official numbers. LinkedIn does not publish them. But they are consistent with what we see across thousands of Overloop users.
Best LinkedIn Email Finder Tools Compared (2026)
If you want to go beyond free methods, here are the tools that matter for extracting emails from LinkedIn profiles. I have tested all of them.
| Tool | Database Size | Chrome Extension | Starting Price | Best For |
|---|---|---|---|---|
| 450M+ contacts | Yes | $49/mo | Full outbound workflow (find + sequence + send) | |
| 100M+ contacts | Yes | Free (25/mo), $49/mo | Domain-based email search | |
| Kaspr | 500M+ phone & email | Yes | Free (5/mo), $49/mo | Phone numbers + emails from LinkedIn |
| 100M+ contacts | Yes | Free (5/mo), $36/mo | Quick lookups with CRM integration | |
| Skrapp.io | 150M+ contacts | Yes | Free (100/mo), $49/mo | LinkedIn email extraction at scale |
| GetProspect | 200M+ contacts | Yes | Free (50/mo), $49/mo | B2B lead lists with email and company data |
The difference between these tools is less about accuracy (they all hit 70-90% for B2B contacts) and more about what happens after you find the email. Overloop lets you push the found email directly into a multi-step outreach campaign with automatic follow-ups. Most other tools require exporting to a CSV and importing into a separate sending tool.
After You Get the Email: What Next?
Having the email is step one. Here is what matters next:
- Verify before sending. Even if a tool says the email is valid, run it through verification. Catch-all domains are tricky.
- Personalize the email. You just visited their LinkedIn profile. Use what you learned. Mention their recent post, their company's latest news, their job change. Anything specific.
- Do not blast. Send 20-30 emails per day from a new domain. Warm up over 2-3 weeks before scaling.
- Follow up. 80% of replies come from follow-ups, not the first email. Send 3-4 follow-ups spaced 3-5 days apart.
For a broader look at all the ways to find professional email addresses (not just from LinkedIn), check our complete guide to finding someone's email address.
If you want to automate LinkedIn outreach alongside email, see our roundup of the best AI LinkedIn outreach tools and our LinkedIn automation guide.
Frequently Asked Questions
How can I get someone's email from their LinkedIn profile for free?
Three free methods work: (1) Click "Contact info" below their headline to check if they share their email publicly. (2) Use Google search operators like "firstname lastname" "@company.com" to find their email indexed elsewhere on the web. (3) Guess the email pattern (firstname.lastname@company.com is the most common format) and verify it with a free SMTP checker. You can also export your LinkedIn connections as a CSV, which includes emails for about 30-40% of your network.
Is it legal to find email addresses from LinkedIn?
Yes, finding publicly available email addresses is legal. Automated scraping of LinkedIn profiles violates their Terms of Service, but using a Chrome extension that looks up emails from external databases while you browse manually is a different activity. For B2B outreach in the US, CAN-SPAM allows cold email as long as you include an unsubscribe link and your physical address. In the EU, GDPR requires a legitimate business interest. In Canada, CASL is stricter and generally requires some form of prior consent.
What is the best Chrome extension to find emails on LinkedIn?
Overloop, Hunter.io, Kaspr, and Lusha are the most reliable Chrome extensions for finding emails directly from LinkedIn profiles. Overloop has a database of 450M+ contacts and lets you push found emails directly into outreach campaigns. Hunter.io is strong for domain-based search. Kaspr also returns phone numbers. The best choice depends on whether you need just the email or a full outbound workflow.
Can I find someone's email on LinkedIn without being connected?
Yes. The built-in "Contact info" section usually requires a 1st-degree connection, but external tools like Overloop, Hunter.io, and Kaspr do not depend on your connection status. They pull email data from their own databases. You can also use Google search operators, check the company website, or look at GitHub commit history to find emails without any LinkedIn connection.
How do I find someone's email from their name and company?
If you know the person's name and company domain, try the most common email patterns in order: firstname.lastname@company.com (used by ~50% of companies), firstname@company.com (~15%), flastname@company.com (~12%). Run each guess through an email verification tool that checks SMTP servers. Two or three guesses usually land the right address unless the company uses a catch-all domain.
How many LinkedIn profiles can I view per day without getting restricted?
LinkedIn does not publish official limits, but based on what we observe across thousands of users: free accounts get throttled around 100 profile views per day, LinkedIn Premium around 150-200, and Sales Navigator around 250-300. Exceeding these limits consistently can trigger temporary restrictions or a commercial use warning on your account.
What is the success rate of LinkedIn email finder tools?
Most reputable tools find verified emails for 70-90% of B2B professionals at companies with 10+ employees. Success rates drop for freelancers, solopreneurs, and very small businesses. The key factor is email verification: tools that do real-time SMTP verification (like Overloop) have higher accuracy than those that rely on static databases alone.
Do I need LinkedIn Sales Navigator to find emails?
No. Sales Navigator helps you build targeted prospect lists with advanced filters (industry, headcount, role, geography), but it deliberately hides email addresses. You still need an email finder tool to get the actual address. If you only need a few emails, the free methods (Contact info check, Google operators, pattern guessing) work without any paid LinkedIn subscription.
Ready to automate your outbound?
Overloop finds prospects, writes personalized emails, and books meetings. Powered by AI.
Try Overloop Free