Reverse Email Lookup: See What Your Email Reveals

A reverse email lookup starts from an email address and works outward: which sites have an account under it, what public profile is attached to it, and whether it turned up in a data breach. People run these lookups for good reasons, such as checking a stranger who emailed them out of the blue, confirming that a business contact is real, or seeing how much their own address gives away.

This guide takes the last angle. It explains what an email-based search can surface, how the better-known tools work, why Gmail treats jane.doe and janedoe as the same inbox, and what you can do to make your own address less revealing. It does not cover ways to dig up a stranger's email, and we would not recommend tools built for that.

What a reverse email lookup can find

An email address is a stable identifier. You use it to sign up, to reset passwords and to receive receipts, and many people have used the same one for ten years or more. That is why an email to social media lookup can work at all: services leak small signals about the accounts tied to an address. The common ones are:

• Registration signals. Some sign-up and forgotten-password pages respond differently when an address already has an account. Enough of those responses add up to a list of services you use.
• Public profiles linked to the address. Some services show a name, photo or public reviews attached to an account, and a lookup can pull those up.
• Breach records. If a site you used was hacked, your address may sit in leaked files alongside an old password, a birthday or a phone number.
• Plain search results. Addresses printed on old forum posts, club newsletters or CVs still get indexed.

None of this needs your password. The person being looked up is usually not notified, either, which is the main reason to check your own address before someone else does.

Email username search: where your handle and inbox overlap

Many people build their email address from their main handle, or the other way round: skyrunner88@gmail.com and @skyrunner88 everywhere else. When that happens, the part before the @ works as a username, and anyone who sees your email can search that name across sites.

That is the honest version of a username search by email. You take the local part of the address (everything before the @) and check it as a handle. Our free tool does exactly that step and nothing more: enter the name before the @ and it checks 3,165+ sites for a public profile with that exact username. It does not take an email address as input and does not query any site's login or reset pages. A Found result means a profile with that name exists. It does not mean it belongs to the person who owns the email, so confirm it by hand.

Try it with your own address. If your email prefix and your public handle match, a stranger can connect your inbox to your profiles in a minute. The fix is simple and covered below.

Gmail dot variations: what a generator actually does

Google's help page Dots don't matter in Gmail addresses says it plainly: mail sent to john.smith@gmail.com, johnsmith@gmail.com or j.o.h.n.smith@gmail.com all lands in the same inbox, and the owner of the address owns every dotted version. Nobody else can register a dotted copy of your Gmail address. The same page notes that this does not apply to addresses on an organization's domain, such as a work or school account run on Google Workspace.

A Gmail dot variations generator simply lists every way to place dots in a name. For an address with eight letters before the @ there are 128 versions, all pointing to one inbox. People use these lists to sign up for the same service several times, which breaks most sites' terms and can get every copy banned. There is a more useful lesson in it for you:

• Watch for mail sent to a dotted version of your address. Sites that do not normalize dots will treat j.ohnsmith as a new customer. Scammers have used this to create an account in your name with their own card details, then send you a convincing "update your payment" email. If you get account mail for a service you never joined, do not click the links. Go to the site directly.
• Use plus addressing for sorting. Google also delivers mail sent to yourname+shop@gmail.com to your normal inbox. A plus tag per site tells you who sold or leaked your address, which dots cannot.

Is there a Gmail username availability checker?

Not an official standalone one. Google's own account sign-up form is the reliable Gmail username availability checker: type a name and it either accepts it or tells you it is taken, usually with suggestions. Two rules explain most of the "taken" answers:

• Because dots are ignored, jane.doe counts as taken if janedoe already exists.
• Google says a deleted Gmail address cannot be reused, by you or anyone else, so an old abandoned name stays blocked.

Third-party "Gmail checkers" usually guess by probing Google's login pages, which is unreliable and is not something we recommend. If you are choosing a new address, pick one that does not match your public handle. Our guide on choosing a unique username has naming ideas.

Holehe and Epieos: what the known tools show

Two names come up in almost every discussion of email OSINT. It helps to know what they do so you understand what your own address exposes.

Holehe email search. Holehe is an open-source Python project that checks whether an address is registered on many sites by reading how their forgotten-password pages respond. Its README says the account owner is not alerted. It only answers "registered or not" for each site; it does not show passwords or messages. Our Holehe explainer covers what it reveals and how to protect yourself.

Epieos email lookup. Epieos (often misspelled "epios") is a commercial web service for reverse email and phone lookups. It can surface a public profile, name, photo or reviews linked to an address, and says it does not notify the person searched. It has a free tier and paid plans. See our Epieos explainer for details.

Both are used by security researchers and investigators, and both can be misused. Use them on your own addresses, or on work you are authorized to do. If you check your own email with either one, keep a list of every site that comes back. That list is your cleanup plan.

How to find someone's email the right way

Search engines get this question constantly, and most "email finder" products answer it by guessing patterns such as first.last@company.com and testing them against mail servers. Those tools are built for sales outreach. Pointing them at private people is a different matter, and cold email to addresses you guessed can run into anti-spam and data protection rules depending on where you and the recipient live.

If you need to reach someone, the legitimate options are short:

• Ask them, or ask a mutual contact to pass on your details.
• Use the contact route they publish: a contact page, a press address, the email in a public bio or a professional profile's messaging.
• For businesses, use the general inbox or the form on their site.

If the person has not published an address, that is usually a choice. Respect it. And if someone uses these methods to reach you after you have cut contact, keep the messages and report it.

Our email checker is not live yet

WhatsMyName Apps does not offer email lookups today. Our email checker page is marked coming soon. When it launches, it is planned to check that an address is well formed and has working mail servers, flag disposable and role addresses, and offer an optional known-breach check. It will not list which sites an address is registered on. Until then, use a free breach-notification service and the steps below.

How to check and shrink your own email exposure

1. List every address you have used, including school, old work and joke addresses.
2. Check each one for breaches on a free breach-notification service. Change any password that appears, everywhere you reused it.
3. Search each address in quotes in two search engines. Note any page that prints it.
4. Run the part before the @ as a username in our free username search. Matching handles show how easily your inbox links to your profiles.
5. Review your public profile on your main email account. Remove a full name or photo if you do not want them shown to anyone who emails you.
6. Split your addresses. Keep one private address for banking and close contacts, and a separate one, or plus tags, for sign-ups.
7. Turn on two-factor authentication on your email first. Your inbox can reset every other account.
8. Close accounts you no longer use. Our guide to securing old accounts walks through it.

For a wider audit that covers usernames, search results and domains, see how to check your digital footprint.

FAQ

Is a reverse email lookup legal?

Looking at public information is generally legal in many places, but how you use it matters. Harassment, stalking and using results for decisions about jobs, credit or housing can break the law. This is general information, not legal advice.

Can I see who owns an email address for free?

Sometimes a search engine or a public profile shows a name. Often nothing comes back, especially for addresses that were never posted publicly. If an unknown address is pressuring you for money or personal details, treat it as a scam and do not reply.

Do Gmail dots work for Google Workspace addresses?

No. Google says the dots rule applies to Gmail addresses, and addresses on an organization's own domain may treat dots as different characters.

Does WhatsMyName Apps store the names I search?

No. The username is sent to our server only to run the check and is not stored or logged.

WhatsMyName Apps is not a consumer reporting agency, and its results must not be used for decisions about employment, credit, housing or insurance. Gmail and Google are trademarks of Google LLC; Holehe and Epieos belong to their owners, and we are not affiliated with any of them.