Deleting Old Accounts: A Safe Cleanup Plan for Unused Logins

A step-by-step plan for finding forgotten accounts, saving what you need, moving logins off old email, untangling sign-in links and deleting accounts safely.

tomyl.ink · Last reviewed October 24, 2026 · 6 min read

Most of us have a trail of accounts we stopped using years ago: a photo site from college, a forum for a hobby we dropped, a shopping account from a single purchase, an old email address that still receives the occasional message. Each one may still hold your name, contact details, photos or even a saved payment card, and each one is another login someone could try to break into.

Cleaning them up is one of the more satisfying privacy chores, and it is on official checklists. Guidance from the Cybersecurity and Infrastructure Security Agency (CISA) on reducing doxing risk tells people to "Deactivate or delete profiles no longer in use." The work goes faster, and goes wrong less often, if you take it in the right order.

Step 1: Build an inventory

You cannot delete what you don't remember. Spend an hour gathering a list from several places:

Your saved passwords. The Federal Trade Commission (FTC) notes that your browser or device, or a password manager, can create passwords for you. If you have let them store your logins, their saved-password lists are often the most complete record of your accounts.
Your email. Search old inboxes for words like "welcome," "verify your email," "confirm your account" and "receipt."
"Sign in with" connections. If you've used an email or social account to sign in to other services, its account settings usually list them. Google, for example, has a linked apps page for apps you've signed in to with your Google Account.
Your phone and browser. CISA recommends reviewing apps and browser extensions frequently and removing any you don't need or use.
Your bank and card statements, for subscriptions you forgot you have.

Write each account in a list or spreadsheet with the site, the email address it uses and what you plan to do with it.

Step 2: Decide what to keep, secure or delete

Sort each account into three groups:

Keep and secure: accounts tied to money, health, government services, your job, or anything you'd need to prove your identity.
Delete: accounts you don't use and don't need.
Unsure: accounts you might want later. Download anything valuable, then lean toward deleting; you can usually sign up again.

For every account you keep, the FTC recommends a strong password and two-factor authentication, and says an authenticator app or security key is more secure than a code sent by text or email.

Step 3: Download and detach before you delete

Deletion is often permanent, so save what you want first. Google's help page on deleting a Google Account, for instance, warns that you'll lose the data and content in it, such as emails, files, calendars and photos, along with subscriptions and content you bought. Google's inactive account policy page adds that you can export and download your data from Google products, like Gmail, Photos and YouTube, at any time. Many other services offer a similar download option in their account or privacy settings.

Next, check whether anything depends on the account. This matters most for email. If you plan to delete an old email account, first log in to every other service that uses that address and switch it to an address you'll keep. Google's deletion checklist makes the same point: if you use your Gmail address for online banking, social media or apps, add a new email address for those services before you delete it.

Why so careful? The FTC explains that password reset links arrive in your email inbox, so someone who controls that inbox could request reset links for your other accounts, change the passwords and lock you out. You don't want accounts you care about still pointing to an inbox you've abandoned.

Before you delete a shopping or subscription account, cancel any active subscriptions and remove saved payment cards.

Step 4: Untangle sign-in connections

"Sign in with" buttons are convenient, but removing the connection is not the same as deleting the account it created. Google's help page is explicit: if you delete a link, Google stops automatic sign-in to the app, but "This doesn't delete your data on the app." Google also says that after you revoke an app's access to your Google data, you may need to contact the app's developer to ask them to delete data they already have.

So handle these in two steps. Sign in to the service, delete the account using that service's own settings, and then remove the connection from your main account.

Step 5: Delete the right way

Use the service's own account settings or its official help center to find the deactivate or delete option. Many services offer both, and the two usually work differently, so read that service's help page to see what each option does and whether there is a waiting period before deletion is final.

Be careful with links. The FTC advises against clicking links in unexpected emails or texts and recommends contacting companies through a website or phone number you know is real. That applies to cleanup too: go to the site directly rather than through an old email that claims to be a "deletion confirmation."

If you can't get in because you've forgotten the password or someone has taken over the account, use the provider's account recovery process. The FTC's guide to hacked accounts lists recovery pages for many major services, and once you're back in, recommends changing the password, signing out of all devices and checking the recovery email and phone number.

Don't let the accounts you keep go dormant

Some providers clean up inactive accounts themselves, which can surprise people who keep an account "just in case." Google's Inactive Google Account Policy says Google reserves the right to delete a personal Google Account and its data if it has not been used for at least two years, and that it sends notifications to the account and to its recovery email, if there is one, before that happens. Activity includes things like reading or sending an email, watching a YouTube video or using Sign in with Google. Other providers set their own rules, so check the policies for any account you rely on.

If you think someone is using your personal information, the FTC directs you to IdentityTheft.gov to report it and get a recovery plan.

Make it a yearly habit

Once the backlog is gone, upkeep is quick. Once a year, review your saved passwords for accounts you no longer use, check your linked apps, and remove unused apps and extensions. Each time you sign up for something new, ask whether you'll still want that account a year from now.

Key takeaways

Build your inventory from saved passwords, old email, linked apps, devices and statements.
Download what you want and move logins off an email address before you delete it.
Removing a "Sign in with" link doesn't delete the account it created; delete the account itself.
Delete through the service's own settings, not through links in unexpected emails.
Secure the accounts you keep and use them occasionally so they aren't treated as inactive.

Sources

Spotted something out of date? Let us know.