The Drawer Full of Logins: A Calm Guide to Closing Accounts You Forgot You Had

There is a particular kind of British clutter that never makes it into the skip. It lives in your inbox: the welcome email from an internet provider you left in 2019, the loyalty card for a shop that closed its doors, the cloud storage account you opened to send one large file. None of it is dramatic. That is exactly why it hangs around.

This is not a security panic. Think of it as the digital equivalent of clearing out the cupboard under the stairs: slightly boring, oddly satisfying, and much easier once you stop trying to do it all in one go. Here is a calm, practical way to shut down the accounts you have forgotten you had — and to leave a sensible trail for the ones that matter.

First, make a map — not a purge

Do not start by deleting things. Start by finding them. Spend twenty minutes gathering evidence:

• Search your email for phrases such as 'unsubscribe', 'welcome', 'your account', 'verify your email' and 'we have updated our terms'.
• Open your password manager and sort by last used. Anything untouched for two years is a candidate.
• Check browser autofill and saved passwords.
• Look at the last six months of bank statements for small subscriptions and annual renewals.
• Dig out old phones and tablets. Their app stores can reveal accounts you have not opened in years.

Make a simple list with three columns: service, what it is for, and whether you still need it. Keep it somewhere private. A spreadsheet is fine; a notebook is fine; a note on your phone is fine as long as it is not called 'passwords'.

The realistic order of operations

Work from low stakes to high stakes. That way you build momentum before you hit anything that involves proof of identity or a final bill.

1. Newsletters and marketing lists. Unsubscribe first. It is quick, it reduces noise, and it makes the rest easier to see.
2. Loyalty schemes and shopping logins. Close the ones you do not use. Ask for deletion, not just 'deactivation'.
3. Old cloud storage and photo accounts. Download anything you want to keep first. Then close the account.
4. Social media and forums. Check whether you want the profile deleted or merely deactivated. They are not the same thing.
5. Old ISPs, mobile contracts and utilities. These often need a final bill or account number. Close them only once you are sure there is no outstanding balance.
6. Financial, government and health accounts. Leave these until last. Do them carefully, and never rush a GOV.UK One Login change on a Friday afternoon.

That last one deserves its own note. Many people now have more than one GOV.UK One Login — perhaps one made for tax, another for a driving licence, or an old identity that predates the current system. Check which email address each one uses, sign in, and look for duplicate or unused identities. If you are unsure, use the official GOV.UK help pages rather than a search advert. Do not create a third identity to solve a problem caused by two.

What UK GDPR actually lets you ask for

The UK General Data Protection Regulation gives you real rights, but they are not a magic delete button for everything ever recorded about you.

You can ask a company for a copy of your data — a subject access request. It is usually free, and they should respond within one month, though they can extend that by up to two months for complex requests. You can ask them to correct wrong information. You can object to direct marketing, and that objection must be honoured. You can ask for erasure in certain circumstances, but not every circumstance. A bank may need to keep records for tax, fraud prevention or legal reasons. An ISP may have to retain some data for regulatory purposes.

So the useful question is not only 'can you delete everything?' It is 'what are you keeping, why, and for how long?' Ask for the retention period in writing. Ask them to confirm when the account is closed and when the remaining data will be deleted or anonymised. If they say they will keep something, ask under which legal basis. You do not need to be a lawyer to ask; you just need to be specific.

Closing an account without losing your mind

Use the account settings first. If there is a 'close account' or 'delete my data' option, use it and take a screenshot of the confirmation. If there is not, email from the address registered to the account. Say clearly: 'Please close my account and delete my personal data where you are not legally required to keep it. Please confirm when this has been done and tell me your retention period.'

Keep the reply. If nothing happens after a month, send a short follow-up and mention your UK GDPR request. For regulated firms, you can also ask for their complaints procedure. You are not being difficult; you are creating a record.

The bit nobody wants to think about

Accounts do not tidy themselves up when we die. A digital legacy plan is not morbid; it is the same courtesy as telling someone where the house keys are.

Start with your password manager. Most have an emergency access or legacy contact feature. Use it. Then make a separate list of the accounts that matter — email, banking, utilities, cloud storage, social media, subscriptions — and tell your executor where to find it. Do not put passwords in your will. A will can become a public document after probate. Use a sealed letter, a solicitor's holding, or the password manager's own legacy tool.

For government services, Tell Us Once can notify several departments after a death, but it does not cover everything. Social media sites have their own memorialisation or deletion rules. Email providers differ. Banks have bereavement teams. The practical gift you can leave is a list, not a treasure hunt.

Your printable one-page checklist

Copy this into a document, print it, and tick as you go.

• Search email for old account and welcome messages
• Check password manager for unused logins
• Review bank statements for forgotten subscriptions
• List loyalty schemes and shopping accounts
• Download files from old cloud storage
• Close low-stakes accounts first
• Check for duplicate GOV.UK One Login identities
• Send subject access or deletion requests where needed
• Ask for retention periods in writing
• Save confirmation emails and screenshots
• Set up password manager emergency access
• Tell your executor where your account list lives
• Book one follow-up hour in a month

A spring clean, not a siege

You will not close forty-seven accounts in an evening, and you do not need to. Aim for one drawer at a time. Low-stakes logins this weekend. Old providers next weekend. The government and financial bits when you have a clear head and a cup of tea.

The point is not to vanish from the internet. It is to stop paying attention — and sometimes money — to doors you no longer use. A quiet clear-out now is kinder than a frantic one later.