In early February, a gigantic database containing more than 3.2 billion emails and passwords was published by a cybercriminal on a hackers forum.Impressive, this data leak actually presented a limited risk insofar as it was a "compilation of many flaws" (Comb for compilation of Many Breaches) containing old data which had already been massively exploited.However, this announcement recalled that hacks and other computer attacks are frequent and most often fall into oblivion.These leaks should however encourage caution and confirm that we can all be the victim of a cyber attack, even if we think we are taking precautions.The fact of adopting good practices in terms of security and privacy on the Internet with its main accounts (e-mail, social networks, bank, etc.) limits risks, but that is not always enough.Indeed, it is more than likely that you are always registered on many online sites or services that you no longer use.
© Labofnac
Most of these accounts still exist and contain personal data that users do not want to exhibit.It can be a personal data (name, first name, identifier, telephone number, date of birth, address), identifiers (e-mail, password) or even credit card numbers.This sensitive information should not constitute easy targets for hackers.To do this, it is strongly advised to delete online accounts that you no longer use.Before going further, you can also consult our file devoted to good practices to adopt online.
Why delete the accounts that I no longer use?
It is not uncommon to be registered on several tens, even hundreds of online sites or services, but how much do you use regularly?Many accounts live their lives without you being aware of it, although they contain personal data (name, first name, age, email address, telephone number, images, etc.) and other information likely to interest hackers.It can be old accounts on social networks (Facebook, Twitter, Pinterest, Myspace, etc.), old email addresses now unused (Yahoo, Outlook (formerly Hotmail), Gmail, Laposte, GMX (Caramail)…), customer spaces or any registration or on a site.It even happens that it is necessary to leave its contact details on a site to discover a service that you will never use more ... without taking the time to delete it.If it may seem trivial, the multiplication of hacks recalls that this forgetfulness is not without danger.
What are the risks ?
Personal data has become a commercial issue: they can be stolen and sold on the Darknet.Some hackers can use them to send spam or perform targeted phishing.If one of the sites you have an account is the victim of data leakage including your authentication means, it becomes easy for hackers to access your personal information, recalls Bercy Infos.These can even go so far as to use your identifiers and passwords to connect to other private accounts.And if this is not the case, getting hold of personal data such as your place or date of birth can be useful to attackers, since they are likely to constitute the answers to the security questions imposed by various websites.
© Creative Commons/Pixabay
To protect yourself, it is wise to delete online accounts that you no longer use rather than keep them unnecessarily.This cleaning makes it possible to avoid the inconvenience mentioned above and to preserve its digital identity by mastering it.
How to list my accounts on websites?
Before thinking of deleting old accounts, you must first find them and it is not an easy task.Not easy to keep in mind all the sites you have registered, even more when you are not used to consulting them.Fortunately, several possibilities are available to you to find these online accounts.
Via a password manager
Difficult to create and remember as long as they respect a high level of security, passwords have long been a source of anxiety for many users.Online security having become a major issue, password managers have gone from tools reserved for technophiles to services essential to our ever more digital lives.They are not content to manage your passwords, they are also the memory of your adventures on the Internet.Whether paid or integrated into your browser, the password manager keeps a trace (if you have authorized it) of all the accounts you have opened.It is possible to search or review all the identifiers and passwords it contains.If you use the word manager associated with your Google account, you can find the sites that are no longer useful to you.
Using your email address
The password manager may not remember all the sites on which you are registered, in particular if the registration dates back a few years and according to your options (authorization, synchronization, change of browsers without importation of data ...)).On the other hand, you may have at least one email address used for several years.
The latter is likely to have been used when registering on a site and you have probably received a welcome message.By looking for terms like "welcome" or "registration", it may be possible to find the registration procedures that you have completed ... before forgetting them.
© Capture screen/Labofnac
Through a Gmail, Facebook account, Twitter
It is possible to use your Facebook, Gmail, Microsoft, Apple or Twitter account to connect to applications, sites and other services.If you have used this method, you can find the list of applications and websites having access to one of these accounts.This option does not directly access the account or delete it, but it can give you indications on your registration.On this occasion, you can take the opportunity to clean up the access granted and perhaps make the choice not to use this feature.If it is put forward by digital giants for its flexibility, it involves sharing even more data with digital giants, such as GAFAM.
© Capture screen / Labofnac
In addition, if you choose to no longer use your Facebook or Google account, you may have difficulty accessing the sites and applications related to these accounts.Conversely, it is not always necessary to let a website access some of your data stored on one of your corporate accounts.Here are some useful links to find the websites you have logged in with this protocol:
- Google - Microsoft - Facebook - Twitter - Linkedin - Instagram
Go to have i been pwned
The HAVE I BEEN PWNED site allows you to check free of charge if your email address is part of a data leak with information on compromises data.It does not directly allow you to find your old accounts, but it can indicate to you if one of your accounts is concerned.If necessary, it will be necessary to change password quickly or to delete the account.
© screenshot/have i been pwned
Note that other tools propose to check if your email address is part of an information leak, but some take advantage of the opportunity to make their database grow.Reference tool, Have I Been Pwned remains a safe bet and even served as a basis for other services, such as Firefox Monitor de Mozilla.
How to delete my old accounts?
The deletion stage is not necessarily as simple as it seems.The first solution is to go directly to the site and search in the settings to find the option to delete your account.The method may vary depending on the services and some sites use Dark patterns to discourage you from definitively deleting your account.Despite these techniques intended to manipulate the user, it remains possible - in the vast majority of cases - to delete their accounts online.To help you in this task, it is possible to go through a site such as Justdelete.me.This linking directory offers direct access to the site page on which you wish to delete your account, as well as explanations.Many popular sites are present and the tool even specifies the level of disorderly difficulty (easy to impossible).
If your site is not in the list, a simple search via your favorite search engine can give you indications on the process to follow.Finally, it is possible to contact the assistance of the site to assert your rights and request the deletion of the account.Before embarking on this operation, do not hesitate to download a copy of your data.
© Capture screen/Facebook
Note that many sites can take their time before definitively deleting your account.The Facebook social network specifies, for example, that it is possible to cancel the deletion of your account by connecting within 30 days of launching the process.In addition, the deletion of all content can take up to 90 days and certain data may always be stored by Facebook for legal reasons.Finally, be sure not to confuse deactivation and permanent deletion of an account.
Can I ask me to prove my identity before deleting my account?
Yes, the CNIL reports on its site that the law provides that anyone who exercises their right of opposition, access or deletion must justify their identity.Facebook can notably ask you for a copy of your identity document, a measure which aims to prevent another person from exercising these rights for you.
Some services do not wait for users and may delete inactive accounts.This information is specified in the conditions of use and you will generally receive an email inviting you to connect so as not to lose your data or your account.
© Capture screen/Labofnac
For example, Google has recently announced that inactive accounts for more than two years will be able to lose files.Regarding Gmail, the Mountain View firm already reserves the right to take "measures concerning inactive accounts, for example by deleting the messages present in the product" if they are not used at least once every two years.For its part, Microsoft warns that you have to use your account to keep it active."You must connect at least once every two years to keep your Microsoft account and the associated active services," explains the firm behind the Outlook accounts.com."If you do not connect in this interval, we will consider your Microsoft account as inactive and we will proceed to its fence," she adds.Another example, Netflix automatically delees the accounts canceled for 10 months and it is possible to delete it before this period by contacting the platform.
What if I can't delete an account?
Conversely, some services do not allow you to delete your account, even if it is no longer used.In this case, it remains possible to connect to this account in order to delete most of your data as notes, images, emails, calendars or bank card numbers.Try as much as possible to erase or modify other personal data such as your name, date of birth, delivery address and other details likely to target you.Deleting the maximum of personal information will limit the risks in the event of data leaks.Do not hesitate to check your password and not reuse it on another account.It is very important to use a different password for each account.
Deleting old accounts challenges in the footsteps we leave on the web and the difficulty of making them disappear.Whether you have been on the web for a few months or long years, it is likely that you have an account that you never use.While sites will ask you if you are sure you want to delete your account, you should rather ask if you really have an interest in registering.In many cases, registration is not compulsory and above all makes it possible to entrust personal data to a service.At the start of the year, we found that it was better to use the Web version of Toonme rather than going through an enrollment on the application.The fact of not registering also limits data leaks and if you have no choice, it is still possible to check upstream if the unsubscribe is easy.