# Email permutator > Lists every likely work email for a name and company, and checks the domain takes mail. Free, no signup. We look this up and don't keep it. **Email permutator. Every likely work email for a name, in seconds, no signup.** Use it at https://tools.joinvalley.co/email-permutator ## What email formats do companies use? 19 patterns, each with an example. A work email is usually the person's name in one of a handful of patterns, such as first.last, flast or first, at the company's domain. Which one a company uses varies, and no public study ranks them across companies. The surest guide is one address you already know at that company: the tool works out its pattern for you. | Pattern | Jane A. Doe at example.com | Made of | | --- | --- | --- | | first.last | jane.doe@example.com | first name + last name | | firstlast | janedoe@example.com | first name + last name | | flast | jdoe@example.com | first initial + last name | | f.last | j.doe@example.com | first initial + last name | | first | jane@example.com | first name | | firstl | janed@example.com | first name + last initial | | first.l | jane.d@example.com | first name + last initial | | first_last | jane_doe@example.com | first name + last name | | first-last | jane-doe@example.com | first name + last name | | last.first | doe.jane@example.com | first name + last name | | lastfirst | doejane@example.com | first name + last name | | lastf | doej@example.com | first initial + last name | | last.f | doe.j@example.com | first initial + last name | | last | doe@example.com | last name | | fl | jd@example.com | first initial + last initial | | f_last | j_doe@example.com | first initial + last name | | last_first | doe_jane@example.com | first name + last name | | first.m.last | jane.a.doe@example.com | first name + middle initial + last name | | fmlast | jadoe@example.com | first initial + middle initial + last name | The order isn't a ranking. Names are lowercased, accents dropped and two-part surnames joined (van der Berg becomes vanderberg); a two-part surname also gets three patterns with just its first part. Sources: [RFC 2606: example domains reserved for documentation](https://www.rfc-editor.org/rfc/rfc2606) (read 2026-10-30) ## How it works Type a name and the company's website. The tool builds the 19 addresses a name can make, from first.last to initials, in your browser. The names never leave it. Only the domain goes to us, to look up where its email goes: its MX records, its address record when there's no MX, or a null MX that says it takes no email. We don't keep it. If you know one address at the company, add it with that person's name. The tool finds which pattern it follows and applies it to the person you're looking for. What it can't know is which address is real. Only the company's mail server knows, and we never contact it. Treat the list as candidates, not a verified address. ## How to find someone's work email. And what the domain check tells you. The pattern does most of the work. The domain check tells you whether there's anywhere for the email to go. ### Start from one address you already know Most companies give everyone an address in the same pattern. If you know one, from an email signature, a press page or a support reply, add it with that person's name. The tool matches it to a pattern and builds the same one for your person. No address to go on? Use the full list, and verify before you send to it. ### Does the domain take email? Mail for a domain goes to its MX records, or to its address record when it has none. A domain can also publish a single MX of ".", called a null MX, to say it accepts no email at all. So a domain with MX records can receive email; one with only an address record might; one with a null MX, or no records at all, can't. Sources: [RFC 7505: the null MX record](https://www.rfc-editor.org/rfc/rfc7505) (read 2026-10-30) ### Google Workspace or Microsoft 365 Google Workspace's MX value is smtp.google.com, and older setups use records that start with aspmx. Microsoft 365's ends in mail.protection.outlook.com. When a domain's MX records match one of those, the tool names the provider. Sources: [Google Workspace Help: Set up MX records for Google Workspace](https://knowledge.workspace.google.com/admin/domains/set-up-mx-records-for-google-workspace) (read 2026-10-30), [Microsoft Learn: Create DNS records for Microsoft 365](https://learn.microsoft.com/en-us/microsoft-365/admin/dns/create-dns-records-using-windows-based-dns?view=o365-worldwide) (read 2026-10-30) ### What no permutator can tell you Which address actually exists. Only the company's mail server knows that, and this tool never contacts it. A list of guesses sent without checking tends to bounce, so verify before a campaign: that's our view. Or skip the guessing. [Valley](https://www.joinvalley.co/?utm_source=tools_suite) ## Sources - [RFC 7505: the null MX record](https://www.rfc-editor.org/rfc/rfc7505) (read 2026-10-30) - [Google Workspace Help: Set up MX records for Google Workspace](https://knowledge.workspace.google.com/admin/domains/set-up-mx-records-for-google-workspace) (read 2026-10-30) - [Microsoft Learn: Create DNS records for Microsoft 365](https://learn.microsoft.com/en-us/microsoft-365/admin/dns/create-dns-records-using-windows-based-dns?view=o365-worldwide) (read 2026-10-30) - [RFC 2606: example domains reserved for documentation](https://www.rfc-editor.org/rfc/rfc2606) (read 2026-10-30) ## Questions people ask ### What is an email permutator? A tool that builds every likely email address from a person's name and their company's domain, such as jane.doe@, jdoe@ and jane@, so you can find the one they use. ### How do I find someone's work email address? Find the company's domain, then try the patterns a name can make. If you know one address at the company, match its pattern; this tool does both, and checks the domain takes email. ### What is the most common email format? No public study ranks email formats across companies, so we don't name one. first.last, flast and first are all in use; one address you know at the company is the surest guide. ### How can I tell if a domain receives email? Look up its MX records. A domain with MX records takes email; one with a null MX, a single record of ".", says it accepts none. ### Can this tool verify an email address? No. It lists likely addresses and checks the domain takes email, but only the company's mail server knows which address exists, and we never contact it. ### How do I know if a company uses Google Workspace or Microsoft 365? Check its MX records. Google Workspace's is smtp.google.com, or a record starting with aspmx; Microsoft 365's ends in mail.protection.outlook.com. The tool tells you which. ### Can I find emails for a list of people at once? Yes. Paste up to 500 people, one per line with their company's domain, pick every pattern or one, and download a CSV. ### Is this email permutator free, and do you keep the names? It's free with no signup. The names never leave your browser; only the domain is looked up, and we don't keep it. ## Related tools - [LinkedIn X-ray search builder](https://tools.joinvalley.co/linkedin-x-ray-search): Builds a Google search that finds LinkedIn profiles by job title, company and city. - [SPF, DKIM and DMARC checker](https://tools.joinvalley.co/spf-dkim-dmarc-checker): Checks a domain's SPF, DKIM and DMARC records against Gmail and Yahoo's sender rules. - [Email spam checker](https://tools.joinvalley.co/email-spam-checker): Scores a cold email out of 100 and flags links, money signs, em dashes and merge tags. ## Next step Want replies, not just clean copy? Valley finds buyers showing real buying signals and messages them across email and LinkedIn. [Valley](https://www.joinvalley.co/?utm_source=tools_suite) Shelf: [01 Data and prospecting](https://tools.joinvalley.co/data-and-prospecting) --- Tools by Valley, made by [Valley](https://www.joinvalley.co/?utm_source=tools_suite). HTML version: https://tools.joinvalley.co/email-permutator