How to search emails inside a large MBOX file

Practical ways to find one email among thousands: what to type, how to narrow results and what search cannot see.

Updated 3 min readSearch
Smartphone lying on a wooden table showing email search results for invoice 2025 with highlights

An archive with tens of thousands of messages is only useful if you can find the one you need. Here is how to search an MBOX file efficiently, both in a viewer and from the command line.

What MBox Viewer can search

The search in MBox Viewer can look at several parts of every message, alone or combined:

  • a date range,
  • the sender and recipients,
  • the subject line,
  • the text of the message body,
  • attachment names.

Limiting a search to a date range first is the quickest way to cut a large archive down. Inside an open message, Find highlights every occurrence of a word, which helps in long threads.

Search terms that work well in MBox Viewer

  • Unusual words beat common ones. A project code, surname or reference number narrows results far more than “meeting”.
  • Try an email address. Typing part of an address, such as @supplier.com, lists everything from one organisation.
  • Use numbers. Order numbers, invoice numbers and amounts are often unique.
  • Search for a phrase. Several words typed together are matched as one phrase, in that order.
  • Then sort. Once the list is shorter, sort by oldest or newest to find a message by date.

What search in MBox Viewer cannot find

Some content is not visible to any text search:

  • Text inside attachments. A search can match attachment names, but words inside a PDF or Word file are a different matter. Export the attachment and search it separately.
  • Images of text. Scanned letters and screenshots contain no searchable words.
  • Spelling variations. Search finds exact text only. Try alternative spellings of names.

Command-line searching with MBox Viewer

For very large files, or to check a file before opening it, a terminal is fast. These commands work on macOS and Linux, and in Git Bash or WSL on Windows.

Count the messages in a file:

grep -c "^From " archive.mbox

List the subjects that contain a word:

grep -i "^Subject:.*invoice" archive.mbox

Find which messages mention a reference number, with the line number:

grep -n "PO-20418" archive.mbox

On Windows without extra tools, PowerShell can do a similar search:

Select-String -Path .\archive.mbox -Pattern "PO-20418"

Note: command-line searches see the raw file. Encoded subjects and Base64 bodies will not match plain words. A viewer decodes those first, so it finds messages that grep misses.

A MBox Viewer workflow for big lookups

  1. Make a copy of the MBOX file and work on the copy.
  2. Run a quick count with grep, or open the file in the viewer to see the total.
  3. Search for the most distinctive term you know.
  4. Sort the results by date and read the likely candidates.
  5. Export important messages as .eml or PDF files and their attachments into one folder.
  6. Write down the search terms you used, in case you need to repeat or explain the search later.

Related MBox Viewer articles