How to Audit Your Online Accounts and Reduce Your Email Footprint
How many online accounts are tied to your email address? If you are like most people, the answer is "way more than I realize." Each one is a potential data breach, a source of marketing email, and a thread connecting your online identity. Here is how to audit and clean up.
Step 1: Find all your accounts
Search your inbox
Search your email for common account-related phrases:
welcome toorthanks for signing upverify your emailorconfirm your accountyour accountoryour orderpassword resetorreset your password
This reveals services you signed up for — including ones you forgot about years ago.
Check your password manager
If you use a password manager (1Password, Bitwarden, etc.), export or browse your vault. Every saved login is an account tied to your email.
Check "Sign in with Google/Apple"
Visit your Google Account → Security → Third-party apps with account access. For Apple: Settings → Apple ID → Sign in with Apple. These show services using your email via SSO.
Step 2: Categorize your accounts
Sort everything into three buckets:
- Keep and use regularly — Banking, primary social media, work tools, essential services
- Keep but rarely use — Occasional shopping sites, travel booking, seasonal services
- Delete — Old accounts, services you no longer use, that site you signed up for once in 2019
Step 3: Delete unused accounts
For each account in the "delete" category:
- Log in and look for "Delete account" or "Close account" in settings
- If there is no self-service delete option, search for "service name delete account" — many have hidden URLs or require emailing support
- JustDeleteMe is a directory with direct links to delete pages for hundreds of services
- For EU residents: send a GDPR Article 17 deletion request if the service does not offer self-service deletion
Step 4: Migrate active accounts to aliases
For accounts you keep, replace your real email address with a unique alias:
- Create an alias in Cleanbox (e.g.,
amazon-shop@cleanbox.me) - Go to the service's account settings and change your email address
- Verify the new alias (the verification email arrives in your inbox via forwarding)
- Add a note to the alias so you remember what it is for
Start with high-risk accounts (shopping, social media, forums) and work your way through the list over time. You do not need to do everything in one day.
Step 5: Set up ongoing protection
- New accounts: Always use a unique alias. Never give out your real address.
- Existing spam: Check which aliases receive the most unwanted email. Adjust spam thresholds or block senders.
- Breach monitoring: Run your aliases through Have I Been Pwned periodically. If one shows up, you know exactly which service was breached.
How long does this take?
| Step | Time |
|---|---|
| Search inbox and list accounts | 30-60 minutes |
| Categorize (keep/delete) | 15 minutes |
| Delete unused accounts | 1-2 hours (spread over days) |
| Migrate top 10 accounts to aliases | 30 minutes |
| Migrate remaining accounts | Ongoing (do a few per week) |
The inbox search alone is usually eye-opening. Most people discover 50-200 accounts they had completely forgotten about — each one a potential data leak.