Online Accounts You Forgot You Had (And Why They're Worth Closing)
Old accounts from long-forgotten services don't just gather dust — they can pose real privacy and security risks. Here's why cleaning them up matters.
Photo: HorizonMetric.com | One Destination For Everyday Insights editorial
—— In This Article
Key Takeaways
- Forgotten accounts still hold your personal data and can be breached even if you never log in.
- Old accounts are common targets in data breaches because passwords are often reused and outdated.
- Closing dormant accounts takes time but meaningfully reduces your exposure online.
- Email-based account searches and data breach notification tools can help you track down old accounts.
- Closing an account is different from deleting one — always request full data deletion where possible.
The Hidden Risk of Dormant Accounts
Think back over the last decade: a streaming trial you never cancelled, a forum for a hobby you dropped, a shopping site that went out of business. Chances are you have dozens of accounts you've completely forgotten — and each one is a small but real liability attached to your name, your email address, and often much more.
Your digital footprint grows every time you sign up for something new, and it doesn't shrink on its own just because you stop logging in. Every dormant account continues to hold whatever data you entered at signup. If the company behind it experiences a data breach — which happens with alarming regularity across services of all sizes — your information gets caught up in it whether you've touched the account in years or not.
Dormant Doesn't Mean Safe
An account you haven't touched in five years still holds whatever personal information you gave it at signup — your name, email, date of birth, and sometimes a saved payment method. If that service is breached, your data is just as exposed as any active user's. Inactivity offers no protection.
This isn't about paranoia. It's about simple risk reduction. Fewer active accounts means fewer places your personal information lives, and fewer opportunities for it to be exposed, sold, or used to target you.
Common Mistakes People Make With Old Accounts
Most people don't intentionally neglect account security — it just happens. Below are the most common errors, and what you can do about each one.
Assuming old accounts are harmless because you never use them.
Why it happens: Out of sight, out of mind — people naturally stop worrying about services they've moved on from.
Reusing the same password across old and new accounts.
Why it happens: Before most people adopted password managers, reusing a single memorable password felt like the only practical option.
Deactivating rather than fully deleting an account.
Why it happens: Platforms often make deactivation far easier to find than deletion, so users assume deactivating is sufficient.
Forgetting accounts tied to defunct email addresses.
Why it happens: People change email providers over the years, leaving an old inbox — and all the accounts tied to it — effectively abandoned.
Ignoring breach notification alerts about accounts you no longer use.
Why it happens: Readers often assume a breach on an old, unused account is no longer relevant to them.
If you're unsure where to start, your email inbox is your best detective tool. Search terms like "welcome," "confirm your account," or "you've successfully registered" will surface a surprising number of forgotten signups. You can also check our broader guide to everyday internet security for a fuller picture of habits worth building.
How to Actually Close an Account — and What to Do First
Before you close any account, do two things. First, download any data you want to keep — photos, order history, messages. Most services have a data export option buried in settings. Second, check whether the account is linked to any other service via "Sign in with Google" or "Sign in with Facebook." Deleting the account could inadvertently lock you out of something you still use.
Deactivating Is Not the Same as Deleting
Many platforms offer a 'deactivate' option that hides your profile without removing your data from their servers. If your goal is to actually reduce exposure, look specifically for a 'delete account' or 'close account' option, and check whether the service's privacy policy confirms that your data is purged. Some platforms retain data for months after deletion requests.
Once you're ready to close, head directly to the platform's account or privacy settings and look for delete or close options. The website JustDeleteMe (justdeleteme.xyz) maintains a crowdsourced directory rating how easy it is to delete accounts on hundreds of services, which can save you significant time.
For platforms you still care about but simply haven't reviewed lately, our walkthrough on social media privacy settings is a good place to tighten up what you're sharing rather than closing outright.
~100
Average online accounts per person
Research from password management companies consistently finds that the average internet user has around 100 or more online accounts, most of them rarely used.
65%
People who reuse passwords
According to a Google/Harris Poll survey, roughly 65% of people reuse the same password across multiple accounts, magnifying the risk when any one account is compromised.
Closing accounts won't make you invisible online — nothing does — but it's one of the more concrete, low-effort steps you can take to reduce unnecessary exposure. Start with the accounts you haven't used in over a year, and work from there.
Technology Editorial Team
Technology Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.
View author profile