Start with a small inventory
List services you still use and those you no longer need. Include accounts linked to your main email, social profiles and cloud storage. A password manager can help you identify older logins, but it may not include every account you have created.
Remove access you no longer use
Review connected applications, active sessions and delegated access on important services. Revoke integrations you do not recognize or need. Removing an integration from your phone may not revoke its server-side permission.
Close accounts deliberately
Before closing a service account, check for files, purchases, subscriptions and information you want to keep. Follow its official closure process. Account deletion and subscription cancellation can be separate steps; read the service’s instructions before assuming one does both.
Keep authenticator entries until access is settled
Deleting an authenticator entry does not delete the service account or disable its 2FA. Keep a working entry while closing an account or changing its authentication method. Remove it only when you have confirmed it is no longer needed.
Refresh your recovery plan
After meaningful changes, review your backups and recovery codes. An older authenticator export may still contain removed secrets. Manage historical copies consciously, and store the current backup somewhere you can access if your everyday device is unavailable.