How to Find Someone's Email by Name for Free (2026)
Finding someone's professional email by name sounds simple — but most guides send you down a rabbit hole of browser extensions, sketchy databases, and cold guesses. Some of those guesses land in spam. Others bounce. A few work, but only after 20 minutes of manual digging.
The good news is there are four methods that actually produce results in 2026, ranging from completely free to extremely fast. This guide covers all of them honestly: what they cost, how accurate they are, and when each one makes sense.
The short version: manual methods are free but slow and error-prone. The only approach that tells you whether an email is actually deliverable before you send is real-time SMTP verification — which is what emailfinder.dev does automatically.
Method 1: Name + domain pattern guessing
Most companies follow predictable email formats: first.last@company.com, flast@company.com, or firstname@company.com. If you know someone's full name and their company domain, you can often guess their email address with reasonable accuracy.
Start by finding one confirmed email at the company — often visible on a press release, blog byline, or the contact page. That single example reveals the pattern for everyone else. Once you have the pattern, apply it to the name you are looking for.
The catch: companies change their email format when they rebrand, merge, or update their IT setup. A pattern that worked a year ago might bounce today. You also have no way of knowing if the person is still at the company unless you verify the mailbox separately.
Method 2: LinkedIn contact info
Some LinkedIn members make their email address visible on their profile under the Contact Info tab. This is the most reliable free source when it is available, because it is self-reported and usually current.
To check: go to the person's LinkedIn profile, click 'Contact info' (below their name), and look for an email address. First-degree connections see this most consistently; second and third degree connections often see nothing.
Limitation: fewer than 20% of LinkedIn users expose their email publicly. For most people you are trying to reach — especially passive candidates or executives who receive a lot of outreach — the field will be empty.
Method 3: Google operator search
Google can surface email addresses that have been published publicly. The most useful operator combination is: "firstname lastname" "@company.com". The quotes force exact phrase matching, and the @company.com fragment makes Google look specifically for email-shaped strings at that domain.
You can also try site:company.com "firstname lastname" to search only the company website, or look for the person on GitHub, personal sites, or conference speaker pages where professional emails sometimes appear.
This works well for researchers, open-source contributors, journalists, and anyone who has published their contact details publicly. It fails for most corporate employees who have never had their work email indexed — which is the majority of people.
Method 4: emailfinder.dev API (the only one that verifies live)
emailfinder.dev takes a different approach from all the manual methods above. You provide a full name and company domain, and the API generates every plausible email pattern for that person, then connects live to the company's mail server via SMTP to confirm which one actually exists.
The result: you get back a verified, deliverable email address — or nothing. There are no false positives. If the person left the company or the email format changed, the API detects it and returns not_found. You are not charged when no email is found.
This is the only method that closes the loop. Manual pattern guessing tells you what an email might be. emailfinder.dev tells you what it actually is. Free credits are included at signup, no credit card required, so you can test it immediately.
Why manual methods fail at scale
If you are looking up one email, the manual methods above are fine. If you are building a prospecting list of 200 people, they break down quickly. Pattern guessing requires confirming the format per company. LinkedIn lookups require having first-degree connections. Google searches return nothing for most corporate employees.
More importantly, none of the manual methods tell you if the email address you constructed is currently active. Sending to a bounced or nonexistent address damages your sender reputation — your domain's deliverability score drops, and future emails from you are more likely to land in spam, even for people who want to hear from you.
Real-time SMTP verification before you send is the only way to avoid this. emailfinder.dev does the verification as part of the lookup, so by the time you have an email to send, it is already confirmed deliverable.
Comparison: free methods vs verified API
Name + domain pattern: free, ~60–70% accuracy, no verification, time-intensive per company. LinkedIn contact info: free, ~20% coverage, highly accurate when available, requires connections. Google operator search: free, low coverage for corporate emails, accurate when it works. emailfinder.dev: free credits at signup then €0.009/verified email, ~87% find rate, zero false positives, instant.
For a one-off lookup where you have time, combine methods 1–3 to build a candidate email, then verify it separately. For any volume of lookups, or anywhere accuracy matters, the API is faster and more reliable than all the manual methods combined.