This guide is your step-by-step recipe for finding every online account linked to your email address. Just like a good dish, it combines a few key techniques—searching your inbox, using online lookup tools, and checking your browser’s saved passwords—to serve up a complete list of accounts you may have forgotten about. It works for both security audits and for cleaning up your digital footprint.
Ingredients
- 1 email address (the one you want to audit)
- Access to that email inbox (webmail or app)
- Access to your web browser’s saved passwords (e.g., Chrome, Firefox, Safari)
- Optional: 1 password manager account (if you use one)
- Optional: 1 phone number (for two-factor authentication checks)
Instructions
- Start with your inbox search. Log into your email and use the search bar. Type in common subject lines like “Welcome to,” “Confirm your email,” “Your new account,” or “Verify your email.” Also search for “account created” and “activation.” This will surface most sign-up confirmation emails.
- Search for password reset emails. In the same search bar, type “password reset” or “reset your password.” These emails often list the service name and sometimes your username, revealing accounts you may have forgotten.
- Check for security alerts. Search for “security alert,” “new login,” or “unusual activity.” These emails often mention the platform and can remind you of accounts you haven’t used in a while.
- Use a dedicated email lookup service. Go to a website like Have I Been Pwned (haveibeenpwned.com) and enter your email address. This will show you which of your accounts have been involved in known data breaches, giving you a list of services you’ve signed up for.
- Check your browser’s saved passwords. In your browser settings, look for “Passwords” or “Saved Passwords.” This will show you a list of all websites for which you’ve saved login credentials.
- Review your password manager (if used). If you use a password manager like LastPass or 1Password, open it and review your vault. It will have a comprehensive list of all your saved logins.
- Check your social media connected apps. Log into each social media account (Google, Facebook, Apple, etc.) and go to “Security” or “Connected Apps” settings. This shows you which third-party services you’ve authorized with that login.
- Compile your list. Create a spreadsheet or document and list every service you find from the steps above. Note whether you still use it, and if not, consider deleting the account.
Tips
- Use multiple search terms: Don’t just search once. Try variations like “welcome,” “thanks for signing up,” “your account is ready,” and “get started.” Different services use different language.
- Check spam and trash folders: Some confirmation emails end up in spam. Search those folders as well, especially for older accounts.
- Be methodical: Go through your inbox month by month if you have a lot of emails. This ensures you don’t miss older sign-ups.
- Don’t ignore old email aliases: If you have multiple email addresses, you’ll need to repeat this process for each one.
Serving Suggestions
This “dish” is best served as a regular security practice. Use the list you compile to prune unused accounts, update weak passwords, and enable two-factor authentication on important services. It’s also great for preparing for a digital declutter or before you delete an old email address.
Variations
- The “Quick Audit”: If you’re in a hurry, just do steps 1, 4, and 5. This will give you a good overview without a deep dive.
- The “Deep Clean”: This involves not only listing accounts but also actively deleting them. After you compile your list, visit each site and delete your account. This takes longer but is more thorough.
- The “Proactive Approach”: For future sign-ups, use a unique email alias (like +tag@yourdomain.com) for each service. This makes it easy to see which services are sending you spam and to disable them.
Storage and Reheating
Your compiled list should be stored securely, ideally in a password manager or a encrypted document. You can “reheat” this audit every 6-12 months to catch any new accounts you may have created. The process itself takes about 25 minutes, but the benefits last indefinitely.
Frequently Asked Questions
Q: Is it legal to use services like Have I Been Pwned?
A: Yes, it’s perfectly legal to check your own email address. These services are designed for this purpose and are widely used by security professionals and everyday users.
Q: What if I find an account I don’t recognize?
A: If you find an account you don’t recognize, it’s possible that someone else created it with your email by mistake, or it could be a sign of a compromised email. If you can, try to log in and close the account. If you can’t, contact the service’s support team.
Q: Can I see accounts associated with someone else’s email?
A: No, you can only see accounts linked to an email address you can access. You cannot look up accounts for someone else’s email without their login credentials.
Q: Will this show me every single account ever created?
A: No. If you never opened the confirmation email, or if the service has been deleted, it may not show up. Also, some services don’t send confirmation emails. This method is thorough but not foolproof.
Q: What if I don’t use a password manager?
A: That’s fine. You can still use the inbox search and Have I Been Pwned methods. However, using a password manager is a great way to keep track of your accounts going forward.
Q: Is there a way to see accounts linked to my phone number?
A: This is harder. You can’t easily search for this. But you can check your phone’s settings for “Accounts” or “Users & accounts” to see which services are linked to your device.
Related
- Smiley French Fries: Crispy Homemade Recipe
- Sticky Rice Champaign IL: The Local Way to Make It
- Peking Duck House Pompano Beach Style Recipe
More recipes to cook
Safety notes: safe minimum internal temperatures from USDA FSIS; raw and undercooked fish guidance from the U.S. FDA. Food safety notes
Spotted an error? Tell us and we will correct it (corrections policy).