The average person has over 100 online accounts, yet most of us actively use only a fraction of them. Those forgotten accounts — the forum you joined in 2015, the shopping site you used once, the free trial you never cancelled — are quietly putting your privacy and security at risk.
Why Old Accounts Are Dangerous
Abandoned accounts might seem harmless, but they represent some of the most overlooked vulnerabilities in your digital life:
Data Breach Exposure
Every account you have ever created stores personal information, and that data remains on the company's servers whether you use the account or not. When a breach occurs, your old email addresses, passwords, and personal details get exposed. According to recent reports, 81% of hacking-related data breaches involve weak, reused, or stolen credentials. If you used the same password on an old account as you do on a current one, a breach of the forgotten account puts your active accounts at risk too.
Identity Theft
Old accounts often contain personal information such as your full name, date of birth, address, and payment details. Criminals can piece together data from multiple breached accounts to steal your identity, open credit lines in your name, or commit financial fraud.
Account Takeover
Attackers can hijack dormant accounts and use them for phishing, spam, or social engineering. A compromised social media account you forgot about could be used to target your friends and family.
The Password Reuse Problem
Research shows that roughly 80-85% of people reuse passwords across multiple sites, and analysis of 19 billion leaked passwords found that only 6% were unique. If an old account with a reused password gets breached, every account sharing that password becomes vulnerable.
How to Find Your Old Accounts
Before you can delete old accounts, you need to find them. Here are the most effective methods:
Search Your Email Inbox
Your email holds the best record of accounts you have created. Search for terms like:
- "Welcome to" or "Thanks for signing up"
- "Confirm your email" or "Verify your account"
- "Your new account" or "Get started"
- "Subscription" or "Free trial"
Go back as far as you can. Many people are surprised to find dozens of sign-up confirmations they had completely forgotten about.
Check Connected App Permissions
Review which third-party apps and services have access to your main accounts:
- Google: Visit myaccount.google.com/permissions to see all apps connected to your Google account
- Facebook: Go to Settings > Apps and Websites to review connected services
- Apple: Check Settings > [Your Name] > Sign in with Apple on your device
- Twitter/X: Navigate to Settings > Security and account access > Apps and sessions
Review Your Password Manager
If you use a password manager like 1Password, Bitwarden, or LastPass, browse through your saved logins. This is often the most complete inventory of accounts you have created.
Check Browser Saved Passwords
Your browser likely has saved login credentials you have forgotten about. Check Chrome (passwords.google.com), Firefox (about:logins), or Safari (Preferences > Passwords).
How to Delete Old Accounts
Use JustDeleteMe
The JustDeleteMe directory (justdeleteme.xyz) maintains a database of direct links to account deletion pages for hundreds of services, along with difficulty ratings. This is the fastest way to find the right deletion page for most services.
Use Account Settings Directly
Most services have a "Delete Account" or "Close Account" option buried somewhere in their settings. Common locations include:
- Settings > Account > Delete Account
- Settings > Privacy > Remove Account
- Profile > Account Management > Deactivate
Contact Customer Support
Some services intentionally make account deletion difficult. If you cannot find a self-service option, email their support team and request account deletion. In many jurisdictions, privacy laws like GDPR and CCPA give you the legal right to have your data deleted upon request.
Before You Delete
Before deleting an account, download any data you want to keep. Many services offer a data export tool in their settings. Also update any other accounts that use the soon-to-be-deleted email as a recovery address.
What to Do When Sites Will Not Let You Delete
Unfortunately, not every service makes it easy to leave:
- Overwrite your data first: Replace your real name, address, and other personal details with fake information before requesting deletion. Even if the account persists, your real data will not be attached to it.
- Remove payment methods: Delete all saved credit cards and billing addresses from the account.
- Revoke permissions: Disconnect the account from your email, social media, and other services.
- File a data deletion request: Under GDPR (if in the EU) or CCPA (if in California), you can formally request data erasure. Companies are legally obligated to comply.
- Unsubscribe from all communications: At minimum, stop the flow of marketing emails and notifications.
Preventing the Problem Going Forward
Once you have cleaned up your old accounts, adopt habits that prevent the problem from recurring:
- Use a password manager to track every new account you create
- Create unique, strong passwords for every service so a single breach cannot cascade
- Periodically audit your accounts — set a calendar reminder every six months
- Think twice before creating new accounts — use guest checkout when possible
- Use email aliases or a dedicated sign-up email to make tracking easier
Automate Your Privacy Protection
Old accounts are just one part of a larger privacy picture. Your personal information also lives on data broker sites, people-search databases, and potentially the dark web. PrivacyOn provides comprehensive protection by monitoring over 100 data brokers for your information, scanning the dark web for compromised credentials, and automatically submitting removal requests on your behalf. With family plans covering up to 5 people and 24/7 monitoring starting at $8.33 per month, PrivacyOn helps you stay on top of your digital exposure without the manual effort.