How to Actually Delete an Old Online Account
Somewhere out there is a shopping site you used once years ago, still holding your name, your address and an old password. Every account you stop using keeps a little of your data, and when that company gets breached, your details leak along with everyone else’s. The fix is not glamorous: find the accounts, then actually delete them instead of just walking away. Here is how we do it, and where the traps are.
Why abandoned accounts are a real risk
An old account is a liability with no upside. It usually has a weak or reused password, no two-factor login, and a saved address or card you have forgotten about. If attackers get that password from a breach, they try it on every other site you might use (this is called credential stuffing). Even if nobody breaks in, the company keeps your data for as long as the account exists.
Do not count on companies tidying up for you. Google, for example, says it may delete personal accounts that have not been used for two years, but most services have no such policy and will keep a dormant account indefinitely.
Step one: make a list, for free
You cannot delete what you cannot remember. Three free sources cover most people:
- Your password manager or your browser’s saved passwords. Every saved login is an account. Scroll the list and note anything you no longer use.
- Your email inbox. Search for phrases like welcome to, verify your email and confirm your account. Repeat for every address you have used, including the old one you barely check.
- Have I Been Pwned. This free site shows which known data breaches included your email address, which doubles as a reminder of services you signed up for and forgot.
Also look at the list of apps connected through “Sign in with Google” or “Sign in with Apple” in those accounts’ security settings. Each one is a separate account, and removing the connection does not delete the account on the other side.
Step two: find the real delete button
Companies rarely put it somewhere obvious. Before hunting through menus, try JustDeleteMe, a free directory with direct links to the deletion pages of hundreds of services, each rated from easy to impossible. It is a directory, not a service: you still do the deleting yourself. If a site is not listed, search its help pages for “delete account” rather than “close” or “cancel”, which often mean something weaker.
Read the wording carefully. Deactivate, disable and hide usually keep your data so you can come back. Delete is what you want. Facebook is the classic example: deactivation can be undone at any time, while deletion starts a 30-day window in which simply logging in cancels the request. After that, Facebook says it can take up to 90 days to clear your data from its systems.
Step three: clean up before you press the button
- Download anything you want to keep, such as photos, receipts or order history. Most large services have a data export option.
- Cancel any subscription and remove saved payment cards first.
- Change the password to something random. If the deletion quietly fails, at least the old reused password is gone.
- If you use this account to sign in to other services (common with Google, Apple and Facebook), switch those to an email login first, or you will lock yourself out of them.
A forgotten account is not asleep. It is someone else’s server holding your details, waiting for the day it gets breached.
When there is no delete button
Some services make you email support or fill in a form. Keep it short: say you want your account and the personal data attached to it deleted, give the email address on the account, and ask for written confirmation. Depending on where you live, the law may back you up. People in the UK and EU have a right to erasure under GDPR, and residents of California and a growing number of other US states have a similar right to request deletion. There are exceptions (a company can keep some records for tax or legal reasons), but mentioning the law usually speeds things along. Keep a copy of your request and the reply.
If a company ignores you completely, fall back to damage control: change the password, strip personal details out of the profile, and remove any saved address or card.
The paid shortcut, and its limits
Some privacy services offer to scan your inbox for old sign-ups or help close accounts for you, which can save time if you have hundreds of them. The honest caveat: to do that, many need access to your email, which is the most sensitive account you own. For most people, an evening with the free steps above does the job without handing that over. And paid data-removal services mostly target data brokers, which is a separate problem we cover in our data broker opt-out guide, not your own forgotten logins.
The short version
Build a list from your saved passwords, your inbox and Have I Been Pwned. Use JustDeleteMe to find each service’s real deletion page, and choose delete, not deactivate. Download what you want, remove payment cards and untangle any sign-in-with links first. If there is no button, send a short deletion request and mention your privacy rights. Do five accounts a week and the pile shrinks faster than you would expect.
Frequently asked questions
Is deactivating an account the same as deleting it?
No. Deactivating or disabling usually hides your profile but keeps your data so you can come back later. Deleting removes the account and, after a waiting period, the data attached to it. On Facebook, for example, deletion has a 30-day window where logging back in cancels it.
How do I find old accounts I have forgotten about?
Check the saved logins in your password manager or browser, search every email inbox you have used for phrases like welcome to or verify your email, and look up your addresses on the free Have I Been Pwned site. Also review the apps connected through Sign in with Google or Sign in with Apple.
What if a website has no delete account option?
Email the company's support or privacy contact, ask for your account and personal data to be deleted, and request written confirmation. In the UK, the EU, California and a growing number of other US states, privacy laws give you a right to request deletion, with some exceptions for records the company must keep.
Do I need to pay for a service to delete my accounts?
Usually not. The free steps cover most people in an evening. Paid services can save time if you have a very large number of accounts, but many need access to your email to work, so weigh that carefully before signing up.
Should I change the password before deleting an account?
Yes, it is a good habit. If the deletion fails or is delayed, a fresh random password means the old, possibly reused one can no longer be used to get in.