Free Cold Email Subject Line Generator

What is a cold email subject line generator?

A cold email subject line generator is a free tool that gives you ten subject lines designed to get opened, in seconds. Enter your prospect’s role and the pain point you solve, and this free cold email subject line generator writes a mix of curiosity, direct, and question-style lines you can test in your next campaign.

It works as a cold email subject line writer for sales reps, an outreach subject tool for founders, and a quick way to beat writer’s block before a send. Short, specific subject lines earn the open, and in cold outreach the open is what buys you the first sentence.

When you need more than subject lines - the full cold email and a follow-up sequence - the Sales Email Copywriter Skill on KissMySkills turns Claude, ChatGPT, or any AI chat into an outreach writer that builds the whole thing.

The subject line is the part US law regulates by name

Most cold email advice treats the subject line as pure craft. In the United States it is also the one element with its own statutory prohibition. CAN-SPAM makes it unlawful to send commercial email with a subject heading the sender knows would be likely to mislead a reasonable recipient about a material fact regarding the message’s contents. The FTC’s plain-English version: the subject line must accurately reflect the content of the message.

That rules out the tricks that circulate in outreach templates - a fake “Re:” on a conversation that never happened, “Following up on our call” when there was no call, an implied referral that does not exist. Penalties run per email rather than per campaign, up to $53,088 each as of August 2026 (the figure is inflation-adjusted, so check the current amount).

There is a subtler mechanism worth knowing. The FTC treats the subject line as decisive in classifying a mixed message: if a recipient reasonably reading it would conclude the message contains an advertisement, the message’s primary purpose is commercial. Your subject line can therefore pull the whole email into CAN-SPAM’s obligations - accurate header information, identification as an advertisement, a valid physical postal address, a working opt-out that stays live at least 30 days, and opt-outs honoured within 10 business days.

Whether you may send at all depends on where they are

The US position is unusual, and building a process on it will get you in trouble elsewhere. CAN-SPAM requires no prior consent, and the FTC states there is no business-to-business exception - all commercial email must comply. It is an opt-out regime: you may send, provided you send properly.

The EU inverts that. The ePrivacy Directive permits direct marketing email only to subscribers who have given prior consent, with a narrow soft opt-in where you obtained the address during the sale of your own product and are marketing something similar, with a free and easy objection route offered at collection and in every message. Critically, that consent rule is written for natural persons; the Directive leaves protection of business subscribers to each member state, which is exactly why B2B cold email is lawful in some EU countries and not others.

The UK draws the line in the same place but more legibly. PECR’s email consent rule applies to individual subscribers, so the ICO’s guidance is that you can email a corporate body - while warning that sole traders and some partnerships count as individuals, and that writing to a named person at a corporate address still needs a lawful basis under UK data protection law. The ICO is also explicit that soft opt-in does not reach prospects or bought-in lists.

Canada is stricter still. CASL prohibits sending a commercial electronic message without consent, express or implied. The one realistic route for cold outreach is a conspicuously published business address, not accompanied by a statement refusing unsolicited messages, where your message is relevant to that person’s role - all three conditions, not two. Maximum penalties reach $1,000,000 for an individual and $10,000,000 otherwise.

Spam trigger words are folklore; your complaint rate is not

The idea that certain words condemn an email is remarkably durable and remarkably unsupported. Neither Google, Yahoo nor Microsoft publishes a list of banned subject-line words. What they publish is infrastructure requirements.

It is worth being precise rather than merely sceptical. All-caps subjects are a real rule in SpamAssassin, the most widely deployed open-source filter - and its weight is 0.5 against a default spam threshold of 5, so it contributes a tenth of what is needed to flag a message and cannot do so alone. Exclamation marks are not a rule at all: there is no exclamation-mark test in the distributed ruleset. Subject length appears in no provider’s requirements either; it affects whether people open, not whether you are delivered.

The documented rules are elsewhere. Since February 2024, senders of roughly 5,000 or more messages a day to personal Gmail accounts must authenticate with SPF and DKIM, publish a DMARC policy (p=none is sufficient), align the From domain with SPF or DKIM, use TLS, keep valid forward and reverse DNS, and support one-click unsubscribe. Google requires spam complaint rates below 0.30% and asks senders to target 0.10%; Yahoo sets 0.3% and requires unsubscribes honoured within two days, where Google recommends 48 hours.

Which connects the folklore to the real rule honestly: a misleading subject line does hurt you, not because a filter reads the words, but because it generates the complaints that are measured.

What this generator can’t do

It can’t tell you whether you are allowed to send. Ten good lines are worthless if your list is EU consumers without consent, or Canadian contacts with no published address. That question is settled before you write anything.

It can’t check the line is true. A generator produces intriguing phrasings, and intrigue that misrepresents the message is the specific thing CAN-SPAM prohibits. You are the one who knows whether “quick question about your Q3 hiring” describes the email.

It can’t do the research that makes cold email work. The variable that separates outreach that gets replies from outreach that gets deleted is knowing something specific and true about the recipient. That comes from looking them up, not from a role and a pain point.

It can’t fix your sending setup. Authentication, domain reputation and complaint rate decide whether the line is ever seen. No subject line survives a domain that fails DMARC.

It can’t tell you which line won. Open tracking has become an unreliable scoreboard as mailbox providers pre-fetch images and mask engagement. Judge cold outreach on replies and meetings booked, and treat open rate as a directional signal at best.