Most people who search for this have the same problem: the right person is on LinkedIn, the conversation needs to move to email, and the profile does not show an address. LinkedIn does not sell email addresses and does not show them by default, so every method below works around that in a different way. Some are free and slow, some are fast and cost a credit. The right one depends on how many people you need and whether the address has to be verified before you send.
We build Ln2CRM, a Chrome extension that connects LinkedIn with Pipedrive, HubSpot, Zoho and Salesforce, and since version 2.0 it finds and verifies work emails. We say so up front and cover the free methods first, because for a handful of contacts they are enough.
How do you find someone's email on LinkedIn?
Short answer: there are four ways. First, check Contact info under the person's name: some members show an email there, usually only to first degree connections. Second, export your connections from Settings, which includes an email only for connections who allowed it. Third, work out the company's address pattern (for example first.last@company.com) and run the guess through an email verifier. Fourth, use a LinkedIn email finder Chrome extension, which looks the person up across data sources, verifies the address and saves it. Ln2CRM does the fourth inside your CRM workflow: click ✨ on the empty Email field, it searches its built in source and any FullEnrich or Apollo key you add, in the order you choose, stops at the first email it finds, marks it with a green check if the mail server confirmed it or a yellow check if it could not, and writes it to Pipedrive, HubSpot, Zoho or Salesforce. Searches are included in every plan (Free 5, Base 100, Pro 300 a month) and only a found email counts.
Method 1: check Contact info on the profile
Open the profile and click Contact info under the name and headline. If the person added an email and lets their network see it, it is there, along with a website or phone if they shared one. It costs nothing and it is the address the person chose to share, which makes it the best possible one to use.
The catch is coverage. Most members never add an email, many limit it to first degree connections, and you see nothing for second or third degree contacts, which is where most prospecting happens. Expect it to work for a minority of the people you look up.
Method 2: export your connections
LinkedIn lets you download your first degree connections as a CSV from Settings & Privacy, Data privacy, Get a copy of your data. The file has an Email Address column, but it is filled only for connections who allow others to download their email, which in practice is a small share. The full walkthrough, including what else the file leaves out and how to import it into a CRM without duplicates, is in how to export LinkedIn contacts.
It is a good way to recover addresses from your existing network in one go. It does nothing for people you are not connected to yet.
Method 3: guess the company pattern and verify it
Most companies use one format for every employee: first.last@, first@, firstlast@, or first initial plus last name. Find one real address from the company (a press page, a signature, a public document), apply the same format to your person, and check the result with an email verifier before sending.
Verification is the step people skip and regret. An unverified guess that bounces hurts your sender reputation, and enough bounces push your next emails into spam. Verifiers connect to the company's mail server and ask whether the mailbox exists. Some servers answer clearly. Others, called catch all servers, accept every address, so no verifier can confirm a guess there; treat those results as probable, not certain.
Method 4: use a LinkedIn email finder Chrome extension
An email finder extension reads the name and company from the profile you are on, looks the person up in one or more data sources, verifies the address and returns it. Done well, it takes a couple of seconds per person and works for people you are not connected to. The differences between tools are in five places, and they are worth checking before you pick one:
| What to check | Why it matters |
|---|---|
| Charged per search or per found email | Find rates for work emails are well under 100%. Paying for misses can double the real cost per email. |
| One source or a waterfall | No single database covers everyone. Searching several sources in order finds more addresses. |
| Verification shown on the result | You need to know whether the address was confirmed by the mail server or is only probable. |
| Where the email ends up | If it stays in the extension, you still copy it into the CRM by hand. |
| Phones and your own keys | Mobile numbers cost far more than emails. Using your own data provider account can be cheaper than a bundled pool. |
How Ln2CRM finds the email
- Open the profile and the create form. On a LinkedIn profile, open Ln2CRM and start a new person. Name, title and company come from the profile.
- Click ✨ on the empty Email field. The button shows how many built in searches you have left this month. You can also switch on Find the email automatically when I open the create form in Settings, so the search starts on its own.
- Ln2CRM searches in your order. The built in search and any FullEnrich or Apollo key you added are tried from top to bottom, and the search stops at the first email found.
- The result arrives with a check. Green means the mail server confirmed the address. Yellow means it is probable but could not be confirmed. You see it before you save.
- It lands in the CRM. The email is written to the person in Pipedrive, HubSpot, Zoho or Salesforce. If the email field there was already filled, the new address goes into a note instead of overwriting it, and if it is the same address, nothing changes.
The search runs in the background, so you can keep working. If it takes longer than usual, clicking ✨ again picks up the same search and is not charged twice. Every search of the last 30 days, with the provider and confidence, is listed in Settings under Enrichment history. The step by step setup is in the help article find and verify emails with Ln2CRM.
What is waterfall enrichment, and does it find more emails?
Waterfall enrichment means asking several data sources one after another and stopping at the first that returns a valid result. It exists because every source has gaps: one is strong in the US tech scene, another in European mid market companies, another in recently hired people. A single source typically finds an email for a part of the people you search; chaining sources raises the share and only costs you for the source that actually answered.
Tools like Clay, Apollo and FullEnrich run waterfalls across many vendors and charge for the convenience. Ln2CRM keeps it simple and in your control: its own built in search is one step, your FullEnrich or Apollo key can be another, and you drag them into the order you want in Settings under Email search order. Phone numbers have a separate order and come only from your own keys, so mobile lookups are billed by your provider at their price, without a markup.
Green check or yellow check: what verification means
| What you see | Meaning | What to do |
|---|---|---|
| Green check | Verified: the mail server confirmed this mailbox exists and accepts mail | Safe to send |
| Yellow check | Not verified: the email is probable, but the server could not or would not confirm it, which is typical for catch all domains | Usable, watch the first send; prefer a green result if another source has one |
| Undeliverable | The address looks like it will bounce | Do not send; try another source or method |
The same green and yellow convention runs through the extension: the on page badge turns yellow when someone's title or company on LinkedIn no longer matches the CRM, and the email check turns yellow when the address could not be confirmed. Yellow always means "probably fine, look before you rely on it".
What does a found email cost? Ln2CRM vs Surfe vs LeadCRM
Price per email is the cleanest way to compare finders, as long as you count found emails, not searches. Figures below are the published annual prices per user, checked on the vendors' pages on October 6, 2026. Surfe shows prices in euros in Europe, so its row is in euros.
| Tool and plan | Emails a month | Price a month (annual) | Per email | Phones |
|---|---|---|---|---|
| Ln2CRM Free | 5 | $0 | Free | Your own FullEnrich or Apollo key, at your provider's price |
| Ln2CRM Base | 100 | $13 | $0.13 | |
| Ln2CRM Pro | 300 | $18 | $0.06 | |
| Surfe Essential | 150 (1,800 a year) | €29 | about €0.19 | Separate mobile credits: 600 a year on Essential, 1,200 on Pro |
| Surfe Pro | 1,000 (12,000 a year) | €69 | about €0.07 | |
| LeadCRM Professional | 150 credits | $23.96 | $0.16 | Same credit pool: one email is 1 credit, one phone is 3 |
| LeadCRM Grow | 400 credits | $39.96 | $0.10 | |
| LeadCRM Ultimate | 1,200 credits | $55.96 | $0.047 |
Reading it honestly: Ln2CRM Pro is the cheapest per email in this table except LeadCRM's top tier, and Surfe Pro gives far more volume for a team that needs a thousand emails a month. Ln2CRM counts only found emails. Where it stands out is the rest of the package at that price: CRM capture, the on page CRM badge, message sync with timestamps and the AI reply all come with the same seat, so the email finder is not a separate bill. For the wider picture, including tools without email finding, see LinkedIn sales tool pricing compared, and the head to head pages Ln2CRM vs Surfe and Ln2CRM vs LeadCRM.
Getting the email into Pipedrive, HubSpot, Zoho or Salesforce
Finding the address is half the job; the other half is that it ends up on the right record without a copy and paste. With Ln2CRM the found email is written to the person you are saving or to the record already linked to the profile: the Person in Pipedrive, the Contact in HubSpot, the Lead or Contact in Zoho and Salesforce. Duplicates are checked by LinkedIn URL before anything is created, the same way as for every other save. If the CRM already has a different email for that person, Ln2CRM keeps the existing one and adds the new address as a note, so nothing is overwritten without you seeing it.
The CRM specific guides cover the field setup: Pipedrive, HubSpot, Zoho and Salesforce.
Is it legal to find someone's email from LinkedIn?
Looking up a business email for one person you have a reason to contact is normal B2B practice in most markets. What you do with it is what the law cares about. In the EU and UK, cold B2B email needs a lawful basis, usually legitimate interest, a clear way to opt out and a record of where the address came from. In the US, CAN SPAM requires an accurate sender, a physical address and a working unsubscribe. LinkedIn's own terms prohibit scraping the site with bots, which is why Ln2CRM looks people up one profile at a time, at your click, and does not crawl LinkedIn.