Digital Minimalism

The digital clutter checklist: 25 things to clean up online

September 30, 2026

19 min read

Copy Link

Quick answer. Digital clutter is an exposure problem more than a tidiness problem. Every forgotten account, mailing list and saved card is a copy of you sitting on a server you are not watching. This checklist covers 25 cleanups across accounts, subscriptions, email and security, in the order that removes the most risk first. Start with the accounts, because they are what generate everything else on the list.

Last updated September 2026. Current as of 30 September 2026.

Why the accounts come before the inbox, even though the inbox is what annoys you
25 cleanups, each with the exact place to go and what to do when you get there
A 30-minute version for tonight and a weekend version for when you have the time
What to put on a calendar so the clutter does not quietly rebuild

What is digital clutter, and why does it matter beyond tidiness?

Most decluttering advice treats your digital life like a junk drawer. Delete some photos and archive some email, and you feel lighter. That is fine as far as it goes, but it misses where the weight actually sits.

Yorba's 2024 State of Clutter report found that members held an average of 246 online accounts and were on 148 mailing lists. Read those two numbers together and the order of operations becomes obvious. The lists are downstream of the accounts. Every list you are on exists because you once made an account somewhere or handed over your address for a discount code. Unsubscribe from all 148 and the accounts are still there, holding your details and free to start writing to you again the moment they have a reason.

The accounts are also where the risk lives. An account you abandoned in 2017 still holds whatever you typed into it in 2017. If that company is breached, your information goes with it, whether or not you ever logged in again.

So this checklist runs in a deliberate order. Accounts first, then the money, then the inbox, then the locks on whatever you decide to keep.

Where do I start?

If you have 30 minutes tonight, do items 21, 23, 9 and 15. You will know whether your address has already leaked, your email account will be harder to break into, and you will have seen every subscription Apple or Google is billing you for.

If you have a weekend, do the accounts section in full. It is the slowest part and the part that pays off longest, because every account you close is one fewer source of mail, breach notices and renewal charges for as long as you would otherwise have kept it.

Either way, you do not have to finish in one sitting. The order matters more than the pace.

The accounts checklist

1. Build your account list from your inbox, not your memory

You cannot close an account you cannot name, and memory is the wrong tool for naming them. When Bitdefender surveyed 7,335 people in 2024, the largest group reported having just 3 to 5 online accounts. Almost nobody believes they have more than ten.

Your inbox remembers what you do not. Every signup sent a confirmation, and most of those are still there. Search for each of these separately:

"welcome to"
"verify your email"
"confirm your account"
"thanks for signing up"
"your account has been created"

Write down every company that comes back. That list is your working inventory for the rest of this section.

Go deeper: How many online accounts do you have?

2. Run the same searches on your old email address

Most people have two addresses: the one they read every day, and the one they used to sign up for things a decade ago. The second one is where the forgotten accounts live, because nobody has looked at it in years.

If you still have access, run every search from item 1 on that address too. If you no longer have access, add the address itself to your notes. You will need it again in item 21.

3. Review everything you signed into with Google or Microsoft

"Sign in with Google" is convenient, and it creates an account every single time. Those accounts often never generate a password, so they never show up in a password manager either.

Google lists them at myaccount.google.com/linkedapps, sorted into apps you signed into with Google, linked accounts, and apps with access to your Google Account. Microsoft keeps its equivalent at account.microsoft.com under Privacy, then apps and services that can access your data.

Remove access for anything you no longer use. Then add it to your list from item 1, because removing the link does not close the account. Google says so directly: deleting a link "doesn't delete your data on the app."

4. Delete the accounts holding a saved card first

Once you have a list, prioritize it. The accounts to close first are the ones holding a payment method, because a breach there costs you more than an email address.

Think of the retailer you bought one thing from, or the food delivery app you tried during a move. Log in, remove the card, then delete the account while you are there.

Go deeper: Why you should delete accounts you no longer use

5. Close the accounts at companies that no longer exist

When a company shuts down or gets acquired, your account does not disappear. It goes wherever the database goes, sometimes to a buyer you never chose and sometimes to a server nobody is maintaining.

Look through your list for startups that folded and brands that were absorbed into bigger ones. If the company still exists in some form, request deletion from whoever owns it now.

6. Delete the social profiles and forums you have stopped using

Old social accounts hold a different kind of data: photos, messages, friend lists, and years of posts. That makes them useful to anyone trying to guess your security answers or impersonate you.

If you want to keep the content, most platforms let you download it before you delete. Do that first, then delete the account itself rather than deactivating it. On Facebook, a deactivated profile keeps your photos and posts intact and just hides them from other people.

Go deeper: What actually happens when you delete an account?

7. Strip the data out of the accounts you keep

Some accounts you need: your bank, your utilities, your health insurance portal. You can still shrink what they hold.

Delete old delivery addresses, and remove saved cards at any retailer where you would happily type your card in again next time. Less stored means less to lose.

8. Send a formal deletion request when the delete button fails

Some companies bury the delete option. Some do not have one at all. A written deletion request under privacy law is the version with a deadline attached.

Email the privacy address listed in the company's privacy policy, say you are exercising your right to deletion, and ask for written confirmation of what was deleted. California gives the business 45 days to respond, extendable once. Under GDPR, companies have one month, extendable to three for complex requests. Keep the reply, because it is the only record you will get.

The subscriptions checklist

9. Open your app store subscription lists

This is the fastest win on the whole checklist. A single APPLE.COM/BILL line on your statement can be several subscriptions stacked together, and Apple's own help page warns that multiple purchases "might be grouped together as one line item."

On iPhone: Settings, tap your name, then Subscriptions. On Android: open Google Play, tap your profile icon, then Payments & subscriptions, then Subscriptions. Cancel anything you do not recognise or no longer use.

One catch from Google's own documentation: "When you uninstall the app, your subscription won't cancel." Deleting the app is not the same as leaving.

Go deeper: The subscriptions your phone can't see

10. Check PayPal for standing payments

PayPal is where old software licences and hosting plans tend to hide, because a PayPal billing agreement lets a merchant keep charging you without ever holding your card number.

On the web, go to Settings, then Payments, then Subscriptions and saved businesses. Some accounts still label it Automatic Payments. Cancelling here stops the charge, but PayPal notes it "typically does not cancel the underlying subscription or contract," so cancel with the merchant too.

11. Search your inbox for receipts, including the yearly ones

Monthly subscriptions announce themselves on every statement. Annual ones email you once, on renewal day, and then go quiet for eleven months. Those are the ones that survive longest.

Search for "your receipt", "payment confirmation", "your plan renews" and "auto-renew". In Gmail, add older_than:1y to one pass so you catch the renewals from last year that are about to come round again.

Go deeper: How to find all your subscriptions securely

12. Find every live free trial and set reminders two days early

Free trials are built on you remembering the signup and forgetting the end date. In a March 2026 survey of 1,272 US adults by Self Financial, 70% said they had been locked into a paid subscription after forgetting to cancel a trial.

Search your inbox for "free trial" newer_than:3m and "trial ends". Visa requires merchants to label trial transactions, so searching your statement for "trial" works too. For every trial you want to keep testing, set a calendar reminder two days before it converts. Apple asks for at least 24 hours' notice before a trial ends, so a reminder on the final day is already too late.

Go deeper: How to find forgotten free trials before they charge you

13. Export 12 months of statements and sort by merchant

Twelve months is the minimum that catches annual charges. Download a CSV from your bank's website, sort it by merchant name rather than by date, and look for the same amount repeating at regular intervals.

Expect some names you do not recognise. Statement descriptors are short and often belong to a parent company or a payment processor. Google's own documentation, for example, shows YouTube Premium billing as GOOGLE *GOOGLE. Search any unfamiliar descriptor before you assume it is fraud or ignore it.

14. After you cancel, delete the account behind the subscription

This is the step almost everyone skips. Cancelling stops the charge, but the login and the stored card both stay with the company.

Blocking the payment at your bank does not cancel anything either. Capital One says it plainly: "Blocking a charge does not cancel any subscription tied to that charge." For anything you have cancelled and will not come back to, go back to item 4 and delete the account while you still remember the login.

The email checklist

15. Use your provider's built-in subscription view

Your mailbox probably already has a tool for this. Gmail added Manage subscriptions in July 2025, in the navigation bar on the web or under the menu on mobile, and it sends a real unsubscribe request on your behalf. Outlook.com has a Subscriptions view under Settings, then Mail, then Subscriptions. Yahoo and Proton both have their own versions.

These are free and worth a first pass. Just know their blind spot: Gmail sorts senders by how often they have emailed you "in the past few weeks," so a sender that writes once a year will not appear.

16. Sort senders into the ones you chose and the ones that found you

Before you start unsubscribing in bulk, sort. Otherwise you will cut the order confirmation you needed next week.

The keep pile is anything transactional: receipts, shipping updates, security alerts, password resets and account notices. Everything else splits into brands you signed up for on purpose and brands that got your address some other way. Deal with the second group first.

Go deeper: How to stop marketing emails without losing the ones you actually need

17. Unsubscribe from senders you recognise, and report the ones you don't

Unsubscribing works better now than it used to. Since February 2024, anyone sending more than 5,000 messages a day to Gmail has had to support one-click unsubscribe and honour requests within 48 hours. US law is slower: CAN-SPAM gives senders 10 business days.

For mail from companies you do not recognise, the UK's Information Commissioner's Office gives the sensible rule. Block and report it as spam instead of unsubscribing, because "replying shows that your email address is live."

Go deeper: Unroll.Me alternatives: 7 tools compared

18. Revoke inbox access from cleanup tools you no longer use

If you have ever connected an inbox cleaner, a newsletter digest or a shopping assistant to your email, it may still have access. Deleting the app does not revoke that.

For Google, check the Access to your Google Account section at myaccount.google.com/linkedapps. For Microsoft, go to account.microsoft.com, open Privacy, then apps and services that can access your data. Remove anything you do not actively use, and delete your account inside the tool itself before you do, since that is usually what triggers removal on their side.

19. Use aliases for new signups from now on

The cheapest clutter to clean is the clutter you never create. Instead of handing out your real address, use an alias for new signups. Gmail lets you add a plus sign and a word after your username, so a store signup can go to yourname+shop@gmail.com and you can filter or trace it later. Dedicated alias services go further, generating a separate address for every signup that you can switch off individually.

20. Decide what happens to the address you stopped using

An old address you never check is a quiet liability. It is still the recovery address for accounts you may care about, and if it lapses, you lose the ability to reset those passwords.

Google deletes personal accounts that have been inactive "within a 2-year period," with warning emails sent first. Before you let an old address go, log into the accounts you are keeping and move them to the address you actually read. Then either keep the old one alive by signing in occasionally, or close it on purpose.

The security and breach checklist

21. Check every address you have ever used against known breaches

Have I Been Pwned lets you search an email address against breach data collected from more than a thousand breached websites, for free. Run your current address and the old one from item 2. Yorba's Breach Beacon does the same check with no signup.

A result tells you which company lost your data and roughly when. It does not remove anything. Treat each hit as a to-do item for the next two steps, and as a candidate for deletion if it is an account you no longer need.

Go deeper: What to do after a data breach: a timed checklist

22. Change the password anywhere it was breached or reused

If a breach included your password, change it at that company. Then change it everywhere else you used the same one, because reused passwords are how one breach turns into several.

A password manager makes this realistic. It generates a unique password for each account and remembers them so you do not have to. It also gives you a running list of accounts you can check against item 1.

23. Turn on two-factor authentication, starting with your email

Your email account is the master key. Whoever controls it can reset the password on almost everything else you own.

The FTC recommends starting with "your most sensitive accounts, like your bank, credit cards, email, social media, tax filing website, and payment apps." It ranks security keys as the strongest method and authenticator apps next, because a text message code is vulnerable to a SIM swap. Use texts only where an account offers nothing better.

24. Freeze your credit (if you are in the US)

A credit freeze stops anyone from opening new credit in your name, including you until you lift it. According to the FTC, it is free, "doesn't affect your credit score," and "lasts until you lift it."

You have to contact each of the three bureaus separately: Equifax, Experian and TransUnion. Lifting a freeze temporarily when you apply for credit takes a few minutes online.

25. Check what search engines and data brokers show about you

Data brokers hold profiles you never created, built from public records and whatever your accounts have shared or sold. This is the one category on the list you did not make yourself.

Google's Results about you tool finds search results showing your home address, phone number or email address and lets you request their removal. Google is clear about its limit: removing a result "doesn't mean that the info is gone from the internet." If you live in California, DROP lets you send a single deletion request to every registered data broker, free. Since 1 August 2026, brokers have had to check DROP at least once every 45 days.

How do I keep it from building back up?

A clean slate decays. You will start another free trial next month, and next year you will make an account somewhere to get free shipping. The goal is not a perfect inventory. It is catching new clutter before it gets old enough to forget.

Monthly: Check your app store subscription lists (item 9) and search your inbox for new trials (item 12). Ten minutes, and it catches most new charges before they compound.

Every three months: Re-run the signup searches from item 1 with newer_than:3m added, and delete anything you made for a one-off purchase.

Once a year: Pull 12 months of statements (item 13), re-run the breach check (item 21), and review the apps connected to your Google or Microsoft account (items 3 and 18).

Whenever you sign up for something new: Use an alias (item 19), and put a note in your calendar to decide within a month whether you are keeping it.

Where Yorba fits

Everything above works by hand, and every step is worth doing yourself at least once. The part that is hard to sustain is the ongoing version, because it depends on you remembering to look.

Yorba scans your inbox for the signup confirmations and automated emails that show you have an account somewhere, then keeps scanning every week so new accounts show up without you searching for them. That covers items 1, 11 and 12 on an ongoing basis. Delete Desk gives you free deletion instructions for more than 10,000 services, and on Premium, at $60 a year, Yorba sends deletion requests and cancels subscriptions for you. Breach Beacon, for item 21, is free with no signup.

What Yorba does not do: it connects to Google and Microsoft mailboxes only, so Yahoo and iCloud Mail are not supported. The first scan covers two years of history and reads header data rather than message content. It does not remove data broker profiles, which is item 25, and it cannot pull anything back out of a breach that has already happened. Nobody can.

Yorba is a Public Benefit Corporation, takes no outside funding, and does not sell user data.

Frequently asked questions

What is digital decluttering? It is the process of reducing the accounts, subscriptions, mailing lists and stored data you have accumulated online. The useful version goes beyond deleting files and emails to closing the accounts that generate them, since those accounts are what hold your personal information.

How often should I declutter my digital life? Do a full pass once, then keep it up with small checks. Look at your subscriptions and new trials monthly, and repeat the breach check and statement review once a year.

What should I delete first? Accounts that hold a saved payment card, followed by accounts at companies that have shut down or been acquired. Both carry more risk than a newsletter, and closing them also stops the mail they generate.

How long does a digital cleanup take? The 30-minute version in this guide covers four quick items that protect you right away. The accounts section takes longer, because each deletion is a separate process at a separate company. Spreading it over a few weekends is normal.

Does deleting old accounts improve security? Yes. An account you never use still holds your data, and if that company is breached, your information is exposed whether or not you logged in. You cannot be breached at a company that no longer holds your data.

What is a digital footprint? It is the total trail of data about you online. That includes accounts you created, data you shared through them, and profiles that data brokers built without your input. This checklist shrinks the parts you created and gives you tools for the broker part.

Can I automate any of this? Some of it. Your mailbox's built-in subscription view handles unsubscribing, and account tools like Yorba handle ongoing account discovery. The judgement calls, like which accounts to keep, are still yours.