How to delete or deactivate old accounts

Every account you stop using keeps a copy of your name, email address, photos and often your contacts. Old accounts also get hijacked. Attackers buy lists of leaked passwords and try them everywhere, and a dormant profile with a password from 2014 is an easy target. Closing what you no longer use shrinks your footprint and removes doors you forgot were open.

Deactivate or delete?

The words mean different things, and platforms use them consistently enough to rely on.

Deactivation hides your profile but keeps everything on the company's servers, ready for you to return. Deletion starts a process that ends with your account and most of its content being erased. Most large services build in a grace period, often around 30 days, during which logging back in cancels the deletion. Facebook and Instagram, for example, both let you cancel within that window, and Meta says full removal of everything you posted can take up to 90 days after deletion starts. X uses deactivation as the first step: if you do not log back in during the deactivation period, the account is deleted.

The practical consequence is simple. After you request deletion, do not open the app or log in "just to check," because that can cancel the request. Log out on every device first.

Step 1: Find the accounts you forgot

Use three sources and combine the results in one list:

1. Your email inboxes. Search each address for "welcome," "verify," "confirm your email," "your account" and "password reset." Older addresses usually surface the most forgotten sign-ups.
2. Your password manager or browser's saved passwords. Scroll the full list; it is often the most complete record you have.
3. Third-party sign-ins. In your Google, Apple, Microsoft and Facebook account settings, look for the list of apps and sites you signed into using that account.

Sort your list into three groups: still use, might want back, and finished with.

Step 2: Save what you want to keep

Before deleting anything, download your data. Large platforms provide an export tool, normally under settings labeled "Download your information," "Your data" or "Export." Google Takeout covers most Google services in one place. Exports can take from a few minutes to a couple of days to prepare, and the download link usually expires, so grab it promptly.

Things people regret not saving: photos that exist nowhere else, messages from family members, writing they published only on that platform, and lists of contacts from a professional network.

Step 3: Remove what spreads

Some cleanup is worth doing even before you delete the account:

• Remove your phone number and secondary email addresses, so they are not kept with an account you will never see again.
• Disconnect linked accounts. A dormant account connected to your main email can be used for "sign in with" access to other services.
• Cancel any subscriptions or saved payment cards attached to the account. Deleting an account does not always stop billing set up through an app store.

Step 4: Close the account

Look for the option in account settings, often under "Account," "Privacy" or "Your information." If you cannot find it, search the platform's help center for "delete account"; many companies hide the option a few menus deep. For smaller sites with no self-service option, email their support or privacy address and ask for the account and associated data to be deleted. Keep a copy of your request.

Write the date in your list, along with any grace period. Set a reminder for after the grace period ends to confirm the account is gone by searching for your old profile URL.

When you cannot log in

This is common with accounts from a decade ago. Work through these options in order:

• Try password reset with every email address and phone number you might have used.
• Use the platform's account recovery form. Many accept identity verification when you no longer have the original email.
• If the site has no recovery route, contact its privacy or data-protection contact and ask for deletion. In the EU, UK and several US states, privacy laws give you the right to request deletion of your personal data, and companies have to respond within set deadlines.
• If the service no longer exists, check whether its domain still hosts your old profile. If a search engine still shows a cached copy of a dead page, you can ask the search engine to refresh or remove the outdated result.

Accounts worth keeping (but locking)

Some old accounts are worth holding onto. An email address you have used for years may still receive password resets for other services. A username that matches your name is hard to get back once released, and someone else could register it and pretend to be you. For these, change the password to a unique one, turn on two-factor authentication, make the profile private or minimal, and leave it parked.

Make it a habit

When you sign up for something new, note it in your password manager with a short comment about why. When you stop using a service, close the account that week rather than leaving it to a future cleanup. The self-audit includes an "old accounts" section you can revisit once a year.

Common questions