Your email address can expose a trail of forgotten accounts, but finding them requires checking inbox history, saved logins, linked identities, and breach records.
Your Email Is a Map of Your Online Account History
If you have used the same email address for years, it may be connected to far more online accounts than you remember.
Shopping sites, social networks, forums, games, streaming services, travel sites, cloud platforms, newsletters, financial services, productivity tools, and old apps may all have stored your email address at some point.
There is no legitimate universal directory that can show every account linked to an email address. The most reliable way to find forgotten accounts is to reconstruct your online history using several sources: your email inbox, password managers, saved passkeys, Google or Apple sign-ins, old apps, receipts, and other records.
Some of these methods provide strong evidence that an account exists. Others provide clues that need to be checked.
1. List Every Email Address and Alias You Have Used
Before searching for accounts, make a list of the email identities you have used over time.
Include:
- Your current personal email
- Previous Gmail, Outlook, Yahoo, or other addresses
- Old ISP email accounts
- Work and school addresses
- Custom-domain email addresses
- Outlook aliases
- Plus-addresses such as
name+shopping@example.com - Email forwarding addresses
- Apple Hide My Email addresses
This matters because accounts created with an old or alternate address may never appear when you search only your current email.
Apple’s Hide My Email feature is particularly easy to overlook. When used with Sign in with Apple, a website may receive a unique relay address instead of your normal email address. Messages sent to that relay address are then forwarded to you.
Treat each email address or alias as a separate trail that needs to be checked.
2. Search Your Email for Registration and Account Messages
Your inbox is usually the best place to start because most services leave some kind of email trail.
Search for phrases commonly used in account-related messages, including:
- “Welcome”
- “Verify your email”
- “Confirm your email”
- “Activate your account”
- “Account created”
- “Thanks for signing up”
- “Password reset”
- “Reset your password”
- “Security alert”
- “New login”
- “Confirm your identity”
- “Subscription”
- “Membership”
- “Your account”
Do not rely on a single search. Companies use different wording, and the emails you are looking for may be many years old.
Search receipts and billing messages too
A purchase, renewal, or subscription email can reveal an account even when you cannot find the original registration message.
Useful searches include:
- Receipt
- Invoice
- Order confirmation
- Payment received
- Renewal
- Trial
- Billing
- Membership
- Subscription
- Cancellation
Check the company behind each result. Canceling a paid subscription does not necessarily delete the underlying user account.
Search every folder
Account messages may not be in your main inbox.
Check:
- Archived mail
- Spam or junk
- Promotions
- Social tabs
- Receipts
- Custom folders and labels
- Imported mail
- Deleted mail that is still retained
If you changed email providers, search old mailboxes as well.
Search for your exact email address
Searching your inbox for your own address can uncover confirmations, receipts, support conversations, privacy notices, and password-reset messages that contain the registered address.
For example:
yourname@example.com
Repeat the process for aliases and older addresses.
3. Check Saved Passwords and Passkeys
Password managers can provide one of the clearest lists of websites and apps where you previously stored login credentials.
Check every password manager or browser password store you have used, such as:
- Google Password Manager
- Apple Passwords
- Microsoft Edge
- Firefox
- 1Password
- Bitwarden
- Dashlane
- Other browser or device password stores
Google Password Manager can display passwords and passkeys saved for websites and apps, including credentials synchronized through your Google Account.
On newer Apple operating systems, the Passwords app similarly stores passwords, passkeys, verification codes, and other login information.
Work through the entries and ask whether you still recognize and use each account.
You may discover forgotten:
- Retail accounts
- Forums
- Social networks
- Travel sites
- Games
- Productivity services
- Cloud platforms
- Streaming services
- Dating apps
A missing password does not mean there is no account
Password managers are useful, but they are not complete account inventories.
An account might be missing because you:
- Never saved the password
- Deleted the saved credential
- Used a different browser or password manager
- Signed up before you began using a password manager
- Used another email address
- Used a passkey
- Chose Sign in with Google or Sign in with Apple instead
Use saved credentials as strong evidence, not as a complete list.
4. Review Accounts Linked Through Google and Apple
Many people create third-party accounts without choosing a separate username and password.
If you have ever clicked Sign in with Google or Sign in with Apple, check those connections directly.
Check Sign in with Google
Google lets you review third-party connections associated with your Google Account, including services where you used Sign in with Google or granted access to Google Account data.
Open your Google Account settings and review the third-party connections section.
Look for services you no longer recognize or use.
Remember that your Google Account and the account maintained by the third-party service are separate accounts. Removing the Google connection does not necessarily remove the external account or information stored by that company.
If you want the account deleted, you may need to visit the service itself.
Check Sign in with Apple
Apple users can review apps and websites using Sign in with Apple through their Apple Account settings.
On an iPhone, Apple currently provides controls for Sign in with Apple and Hide My Email through Apple Account and iCloud settings. Hide My Email may have created a unique relay address for a particular service.
This is important because searching only for your normal email address can miss accounts registered under an Apple relay address.
5. Review Microsoft, Work, and School Connections
Microsoft accounts can also provide clues, although Microsoft’s account and application systems work differently from Google’s and Apple’s third-party sign-in lists.
Microsoft’s privacy dashboard can show certain apps-and-services activity associated with a Microsoft account. It does not function as a complete historical directory of every external account you have ever created.
If you use Microsoft 365 through work or school, also review applications and permissions connected to your organizational account.
Pay particular attention to services that previously requested access to:
- Contacts
- Calendars
- Files
- Profile information
- Organizational data
Treat these records as clues. An authorized application is not always the same thing as a separate user account.
6. Check Old Apps, Browser History, and Bookmarks
If email and saved credentials do not uncover everything, your devices may provide another trail.
Review old apps
Look through applications currently installed on your phone, tablet, or computer, as well as your previous download or purchase history where available.
Pay attention to apps in categories that often require accounts:
- Social media
- Shopping
- Food delivery
- Travel
- Gaming
- Fitness
- Dating
- Banking and finance
- Messaging
- Photo storage
- Cloud services
- Productivity
Finding an old app does not prove that you created an account. It simply gives you a service worth investigating.
Search browser history
Old browsing history can reveal sites that generated few or no emails.
Try searching for terms such as:
- Login
- Sign in
- Account
- Profile
- Dashboard
- Settings
- Register
Also inspect old bookmarks and favorites.
If browser synchronization was enabled, historical data may still exist on another device or browser profile.
7. Check Known Data Breaches for Forgotten Services
Data-breach records can sometimes reveal websites or companies where your email address previously appeared.
For example, if a service was breached and its exposed records contained email addresses, a reputable breach-notification database may indicate that your address appeared in that incident.
This can be useful for finding services you no longer remember.
However, a breach result does not automatically mean you have an active account today.
Your email could have appeared because of:
- A deleted account
- An old customer record
- A mailing list
- A forum registration
- An imported contact list
- A third-party database
- A historical account that no longer exists
The reverse is also true: an account that has never appeared in a known breach will not show up in breach records.
Use breach data as another source of evidence, not as a master list of your accounts.
8. Use Official Account-Recovery Tools for Services You Recognize
If you strongly suspect you created an account with a particular company, its official recovery page may help confirm or recover access.
Go directly to the service’s official website or app and look for options such as:
- Forgot password
- Recover account
- Find my account
- Trouble signing in
Some companies will send a password-reset or recovery message if the email address matches an account.
Others deliberately avoid telling you whether an email is registered. You may see a response such as:
If an account exists for this email address, we will send recovery instructions.
This protects users against account enumeration, where someone tries large numbers of email addresses to discover who uses a service.
Use recovery tools only for websites you genuinely recognize. Do not enter your email into random websites claiming to check hundreds of services at once.
Be Careful With “Find Every Account” Websites
Websites that promise to uncover every account connected to an email address should be treated cautiously.
There is no public global database containing every private account registration.
Third-party “account finder” services may instead rely on combinations of:
- Search-engine results
- Public social profiles
- Data broker records
- Breach data
- Scraped websites
- Marketing databases
- Username matching
- People-search databases
These sources can sometimes produce useful leads, but they cannot reliably show every private account associated with an email address.
They also create another privacy question: what happens to the email address you enter?
Before submitting your address to an unfamiliar service, consider who operates it, what information it collects, whether it stores your searches, and what its privacy policy says.
For most people, inbox history, saved credentials, and identity-provider records provide a safer starting point.
Can You Search the Web for Accounts Linked to Your Email?
You can search a search engine for your email address inside quotation marks:
"yourname@example.com"
This may reveal places where the address has been published publicly, such as:
- Forum posts
- Business listings
- Public profiles
- Documents
- Archived pages
- Community websites
It cannot reveal private registration databases.
If nothing appears, that does not mean the email is not connected to other accounts. It only means the search engine did not return a publicly indexed result.
Can Someone Else Find Accounts Using Your Email Address?
Sometimes.
Someone who knows your email address may be able to connect it with publicly available information from:
- Search engines
- Social profiles
- Forums
- Data breaches
- Data brokers
- People-search sites
- Public business records
- Reused usernames
What they generally cannot do is enter your email into one legitimate service and receive a complete list of all your private accounts.
The bigger privacy risk comes from combining small clues.
One result may expose a username. That username may reveal another profile. An old breach may identify another service. A public profile may reveal a real name, employer, or location.
Individually, each piece may reveal little. Together, they can build a much clearer picture of your online history.
Ask a Company What Personal Information It Holds
If you know which organization you are dealing with but cannot determine what account or personal information it still holds, privacy laws may provide another route.
The exact rights depend on the country, state or province, type of organization, and applicable law.
United Kingdom
People in the U.K. can make a subject access request asking an organization whether it uses or stores their personal information and requesting copies of that information. Organizations normally have one month to respond, although extensions are possible in some circumstances.
Australia
Australian Privacy Principle 12 generally requires covered entities that hold personal information about an individual to provide access on request, subject to specific exceptions. The OAIC states that APP 12 requests do not require a particular formal process.
Canada
Canada’s federal Privacy Act and PIPEDA provide access rights within their respective areas of application, although provincial privacy laws may also apply depending on the organization and location.
European Union and EEA
Data-protection rules also give individuals rights over personal data, including rights of access and, in relevant circumstances, erasure. Organizations handling requests generally operate within defined response periods under the GDPR framework.
United States
The United States does not have one general nationwide consumer privacy system equivalent to the GDPR. Depending on where you live and which organization holds the information, rights to access or delete personal data may arise under state privacy laws or sector-specific rules.
Privacy requests are usually unnecessary for ordinary account cleanup, but they can be useful when normal account-management tools do not provide enough information.
Create a Private Account Inventory
Once you start identifying accounts, record them so you do not have to repeat the process later.
A simple inventory might contain:
| Service | Email Used | Keep? | Security Checked? | Action |
|---|---|---|---|---|
| Online store | Personal email | No | N/A | Delete |
| Social network | Old email | Yes | Yes | Keep |
| Old forum | Alias | No | No | Close |
| Cloud service | Google sign-in | Yes | Yes | Keep |
Do not store actual passwords in an ordinary spreadsheet.
A password manager is a better place for credentials.
What Should You Do With Accounts You Find?
Finding forgotten accounts is only useful if you act on what you discover.
If you still need the account
Check that:
- The password is unique
- Your recovery email is current
- Your recovery phone number is correct
- Multi-factor authentication is enabled
- Old devices or sessions are removed where appropriate
- Unnecessary third-party access has been revoked
- Personal information stored in the account is still needed
Your email account deserves particular attention. If an attacker gains control of your inbox, they may be able to use password-reset messages to take over other accounts. The U.S. Federal Trade Commission recommends protecting accounts with strong passwords and two-factor authentication, and choosing stronger methods such as an authenticator app or security key when available.
If you no longer need the account
Look for options such as:
- Delete account
- Close account
- Remove profile
- Erase data
- Deactivate account
When permanent deletion is available and appropriate, it generally reduces your exposure more than simply abandoning the account.
An unused account can continue holding information such as your name, email address, phone number, delivery addresses, messages, photos, purchase history, or other personal data long after you stop using the service.
A Practical Checklist for Finding Linked Accounts
For a thorough account audit, work through these steps in order:
- List every email address and alias you have used.
- Search each inbox for registration, verification, security, subscription, and password-reset messages.
- Search receipts, invoices, renewals, and cancellation emails.
- Review saved passwords and passkeys.
- Check Sign in with Google connections.
- Check Sign in with Apple and Hide My Email addresses.
- Review relevant Microsoft, work, and school connections.
- Look through old apps, browser history, and bookmarks.
- Check reputable breach records for forgotten services.
- Use official recovery tools for services you recognize.
- Record confirmed accounts in a private inventory.
- Secure accounts you want to keep and delete those you no longer need.
Finding Linked Accounts Is Also a Privacy Audit
There is no one-click method for finding every account connected to an email address.
The most effective approach is to combine several sources of evidence: email history, saved passwords and passkeys, Google and Apple connections, old apps, browser records, subscriptions, and breach history.
Start with the sources that provide the strongest evidence, then use secondary clues to fill the gaps.
Once you know which accounts still exist, decide which ones are worth keeping. Strengthen the security of active accounts and remove accounts you no longer need.
The result is more than a cleaner account list. It is a clearer view of where your personal information exists online — and a practical way to reduce the number of forgotten places where that information can remain exposed.