Blog/Account security

Old Email Accounts You Forgot About

Forgotten email accounts from school, old jobs or years ago can still be linked to your accounts and personal data. How to find them, and whether to recover, secure or close them.

CyberWatch AI30 September 2026 · 2 min read
An old laptop open on a bed with a web page on screen

Most people have at least one forgotten email account: the one from school, the one made for a first job, the one with an embarrassing name from years ago. Forgotten does not mean harmless. Old accounts often have weak, reused passwords, no two-step verification, and links to other accounts you still use.

Why old accounts matter

  • They may still reset other accounts. Old social media, shopping or even banking may use them for recovery.
  • They often use old passwords that have leaked in breaches.
  • They hold personal history: documents, photos, addresses, conversations.
  • They can be used to impersonate you to old contacts.

How to find them

  1. Search your password manager and browser for saved logins with old addresses.
  2. Search your main inbox for forwarded mail or messages mentioning old addresses.
  3. Check breach services for addresses you remember. See how to check if your details were in a breach.
  4. Think through your history: schools, universities, past employers, internet providers, old phones.

Recover, secure or close?

SituationWhat to do
Still linked to accounts you useRecover it, move those accounts to your main email, then close it or secure it fully.
Contains things you wantRecover it, download what you need, then close it.
Not linked to anythingClose it if you can, to reduce risk.
You cannot get back inTry the provider's official recovery. If that fails, update any accounts that used it.

If you keep one

Secure it like your main account: unique password, two-step verification, current recovery details, and a check of forwarding rules and connected apps. See how to secure your email account.

Inactive accounts can be deleted by providers after long periods without sign-in. If you need something from an old account, act now.

Also consider

Got an email to an old address about "account closure"? Paste it into CyberWatch AI Scan for a free check; it may be phishing.

For more, see our guide to identity theft and account security.

Frequently asked questions

Why are old email accounts a risk?

They often have old, reused passwords and no two-step verification, may still be linked to other accounts, and may contain personal information. If taken over, they can be used to reset those accounts or impersonate you.

Will my provider delete an inactive account?

Some providers delete accounts after a long period of inactivity. Check your provider's policy. An account deleted this way may lose everything in it.

Should I close old accounts or keep them?

Close them once you have moved linked accounts to your main email and saved anything you need. If you keep one, secure it like your main account.

Sources

  1. Have I Been Pwned, Troy Hunt
  2. Tips to complete account recovery steps, Google Account Help
  3. Top tips for staying secure online, UK National Cyber Security Centre
Share this article
LinkedIn WhatsApp X
For organizations

Your people get these messages at work too.

CyberWatch AI sends your staff realistic practice attacks, trains the gaps it finds, and shows management exactly where the organization stands.