How to find every account linked to your email address

You are cleaning up, or a breach alert just landed, and it hits you that you have no idea how many services have your email address. Years of signups, one-time checkouts, and free trials have piled up, and there is no obvious place to go see the full list.

No single button lists every account tied to your email. You reconstruct the list from four sources: search your inbox for “welcome” and “verify your email” messages, review the “Sign in with Google” and “Sign in with Apple” app lists, open your password manager’s saved logins, and run your address through Have I Been Pwned for breach exposure.

Can you find every account linked to your email in one place?

You cannot, because no such place exists. No company keeps a master list of every service you signed up for, and your email provider only sees the mail that arrives, not the accounts behind it. So finding your accounts is detective work, not a lookup. The good news is that four sources overlap enough to rebuild almost the whole picture.

The scale is bigger than most people guess. According to a NordPass study (2024), the average person kept close to 170 passwords for personal accounts. The 2026 update put the figure nearer 120, a decline the researchers tied to single sign-on, where people tap “Sign in with Google” instead of making a new password. That shift matters here, because those single sign-on accounts never generate a password you can look up. You have to find them a different way, which is exactly what the methods below cover.

How do you search your inbox for accounts you signed up for?

Your inbox is the closest thing to a record of every account you ever made, because almost every service sends a confirmation email at signup. Search for the words those messages use, and old accounts surface fast.

1. Search the signup words. In Gmail or Outlook, search your mail for welcome, verify your email, confirm your account, and activate your account, one at a time. These phrases appear in the first email nearly every service sends.
2. Add the transactional words. Follow up with your receipt, your order, and your subscription. These catch stores and paid services that skipped a formal welcome email but still emailed you a confirmation.
3. Search all your mail, not just the inbox. Include archived, spam, and trash. In Gmail, run the search from the All Mail view; in Outlook, choose to search all folders. Old confirmations are usually archived, not sitting in your inbox.
4. Narrow to the subject line when results balloon. In Gmail, subject:"verify your email" limits matches to messages with that exact phrase in the subject, which cuts the noise from newsletters that merely mention the words.

The outcome is a scrollable list of senders you once registered with. Some you will recognize instantly. Others will be a shop you used once in 2019 that still has your address on file.

How do you check “Sign in with Google” and “Sign in with Apple” logins?

Check the connected-app lists that Google and Apple keep for you. When you tap “Sign in with Google” or “Sign in with Apple” instead of making a password, that provider records the link, so both keep a running list of the apps you signed into. This is the only reliable way to find accounts that never created a password for you to look up.

For Google, sign in to your Google Account, open Security, and find “Your connections to third-party apps and services,” or go straight to myaccount.google.com/connections. The page groups your links: apps you signed into with Google, and apps you granted broader account access. Select an entry and choose See details to read what it can reach. Google’s help page names a different exit button for each kind of link: Remove access for an app holding account data, Stop using Sign in with Google for a login-only connection, and Delete link for a linked account.

For Apple, open Settings on your iPhone or iPad, tap your name at the top, then tap Sign in with Apple to see every app tied to your Apple Account. On the web, sign in at account.apple.com, the address that replaced appleid.apple.com, and open Sign-In and Security. Select an app, then tap Delete to stop using Sign in with Apple for it. Apple’s guide adds a catch worth reading before you tap: some developers issue one Sign in with Apple account across several of their apps, so stopping it for one stops it for all of them.

If you also use “Sign in with Facebook,” Facebook keeps the same kind of list in Settings under Apps and websites, where you can review or remove each connection. Between them, these three cover most of the passwordless accounts your inbox search will miss.

What does your password manager show you?

A password manager holds one entry per site you saved a login for, so its vault is a direct index of your accounts. If you use Chrome, Safari, iCloud Keychain, 1Password, or Bitwarden, open the saved-passwords list and scroll. Every row is a service that has your email address.

Two features go further. Most managers run a checkup that flags logins whose passwords turned up in a known breach, which doubles as a hint about where your address is exposed. Google’s version, Password Checkup, sorts everything saved to your Google Account into three buckets: exposed, weak, and used in multiple accounts. You reach it at passwords.google.com or from Chrome under Passwords and autofill. Reviewing that list does two jobs at once: it reminds you of accounts you forgot, and it points at the ones worth closing or securing first.

The gap to know about: a password manager only shows accounts you saved in it. Anything you typed by hand and never stored, or created before you started using the manager, will not be there. Treat the vault as one strong source, not the whole answer.

How do you check where your email leaked in a breach?

Run your address through Have I Been Pwned, the free breach-notification service security researcher Troy Hunt has run since 2013. Type your address and it lists every disclosed breach it appeared in, with the date of each and what was exposed. Each breached service on that list is somewhere you almost certainly had an account. The index is not small: as of August 2026 the site reports 1,022 breached websites and just under 17.8 billion pwned addresses.

One limit matters, and it is easy to misread. Have I Been Pwned checks breaches, not accounts. It surfaces services that were breached and had their data indexed, so an account on a company that was never breached, or whose breach is not public, will not show up. It is a strong supplement to your inbox search, not a replacement for it. While you are there, turn on notifications so the service emails you when your address turns up in a future leak. For the full picture of where a leaked address travels next, and who buys it, see where your email address goes after a data breach.

What should you do with the accounts you find?

Split the list into two piles: dead accounts to close, and live senders to quiet down. Each pile gets a different action.

Close the dead ones. For any account you will not use again, delete it rather than leaving it dormant. A deleted account removes your data from that service and takes you out of its next breach. Look for “delete account” in the service’s settings; if you cannot find it, Just Delete Me catalogs the direct deletion link for hundreds of services and grades each one easy, medium, hard, or impossible.

Quiet the live ones. For accounts you keep but no longer want mail from, unsubscribing at the source beats deleting the messages one by one. Doing that by hand across dozens of senders is slow, and not every unsubscribe tool deserves the inbox access it asks for. Email Unsubscriber scans your Gmail or Outlook in your own browser, lists every subscription sender, and fires the real one-click opt-out where the sender supports it. It asks for read-only access, so it can see who is mailing you but cannot send or delete anything, and it appears on that same Google connections page if you want to remove it the moment you finish. The scan runs on your device, and we never read, analyze, or monetize your email content.

Then change how you sign up. The reason this cleanup took an afternoon is that your real address went to every one of those services. Going forward, hand out a masked alias for accounts you might keep, and a burner address for one-time signups you will never revisit. The next breach burns the alias instead of your main inbox, and you learn exactly which service leaked it.

The takeaway

There is no single screen that lists every account tied to your email, so you build the list yourself from four overlapping sources: an inbox search for signup words, the Sign in with Google and Apple app lists, your password manager’s vault, and a breach check on Have I Been Pwned. Together they surface almost everything. Once you have the list, close what is dead, unsubscribe from what is live, and start handing out aliases so the next round of cleanup is a fraction of the size.