First, identify what you found: an account you created and can still access, an account showing activity you did not authorize, or a listing on a people-search site. Finding old information alone does not prove identity theft. If you recognize the account, secure it and decide whether to keep or close it; if you see signs of misuse, investigate your financial and credit records and follow official recovery steps.
Start by identifying the account and the risk
Ask two questions: Do you recognize the service and account, and does anything show that someone else has used it? An old profile or saved personal detail is a reason to review the account, not proof that your identity has been stolen.
As an Amazon Associate I earn from qualifying purchases.
If you do not recognize the account, or it contains information you did not provide, contact the service through its official website or app. Do not use a sign-in link, phone number, or support address from an unexpected email or text. Phishing messages can imitate real companies; the Federal Trade Commission (FTC) advises reaching a company through a website or phone number you already know is genuine: FTC guidance on recognizing and avoiding phishing scams.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Look for concrete signs of unauthorized access, such as unfamiliar profile changes, messages, purchases, or recovery details. For possible identity misuse, also check bills, bank statements, and credit reports. These checks help distinguish a forgotten account from activity that calls for a broader response. If you only found an old account and cannot identify suspicious activity, start with securing or closing that account rather than assuming someone has stolen your identity.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Secure an account you can access
- Go directly to the service. Open its official app or type its known address into your browser. Avoid links in unexpected messages.
- Change the password. Choose a new, unique password that you do not use for any other account. If the service offers a sign-out-all-sessions or sign-out-all-devices control, use it.
- Turn on two-factor authentication (2FA). Use an authenticator app or security key when the service supports them and you can keep the method available. The FTC identifies these as stronger options than codes sent by text or email. A FIDO2 security key is only useful if the service supports security keys; check its security settings before considering one.
- Check account recovery details. Confirm that the recovery email address and phone number belong to you and that no unfamiliar method has been added.
- Review activity and settings. Check recent sign-ins, connected devices, forwarding rules, sent and deleted email, social messages, posts, and unfamiliar contacts for changes you did not make.
Email deserves special attention: someone with access to it may be able to intercept password-reset links for other accounts. If you find suspicious email activity, secure the email account as well as the old account. Review forwarding rules in particular, since an unfamiliar rule could direct messages elsewhere. Also look for sent or deleted messages and changes to contacts or recovery details that you did not make.
Choose a second factor you can reliably use and keep access to. An authenticator app and a hardware security key are both options when supported by the provider; their availability and setup depend on the service. Check its security settings before buying or setting up anything. Text or email codes may be the only choice a service offers, but use a stronger available option if it fits your situation.
What if you reused the password?
Change the same or a similar password everywhere you used it. Prioritize your email account and accounts tied to money, payments, or other sensitive information. Attackers may try passwords exposed in one breach on other services. Do not wait to see whether someone signs in elsewhere before changing reused credentials.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsA password manager can generate and store distinct passwords; check that any manager you use supports MFA and understand how you would recover access to it. A built-in browser or device password generator is another option. When a service offers passkeys, you can use one instead of a password. These are ways to reduce password reuse, not guarantees that an account cannot be compromised. Compare password-manager options by the security features you need, including MFA support and the recovery process; no particular provider is required.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
NIST’s password guidance reports that the Identity Theft Resource Center recorded more than 3,000 data breaches in 2024, potentially exposing hundreds of millions of online accounts. That is a broad 2024 figure, not an estimate of your personal risk or evidence that your account was involved. NIST’s Digital Identity Program lead Ryan Galluzzo cautions: “The worst password I can think of is ‘password’ or ‘12345.’” See NIST guidance on passwords.
Should you delete an old account?
If you no longer need the account, use the provider’s current official account-closure or deletion controls. Before closing it, check whether you need to save or transfer purchases, files, records, subscriptions, or recovery functions. Follow the service’s current account settings, privacy notice, or official support instructions; there is no universal deletion process or deadline established for every provider.
Consider what still depends on the account before you close it. It may contain files or records you want to keep, or act as a recovery method for another account. Check whether there are purchases or subscriptions to handle first. These are practical checks, not a guarantee that a provider can transfer everything or that closing the account erases all data.
Account closure does not necessarily remove every copy of information already held by the provider or another party. Some state laws give consumers rights to request deletion, but eligibility depends on where you live and the circumstances. Check the applicable local rules and the provider’s privacy notice rather than assuming one right or procedure applies everywhere.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How to respond if you find signs of identity misuse
Review bills, bank statements, and credit reports for unfamiliar accounts, charges, withdrawals, or bills. An old account is different from evidence such as a charge, account, or withdrawal you do not recognize. If you find identity theft or need help recovering, report it at IdentityTheft.gov to get a free personalized recovery plan.
Credit freezes and fraud alerts in the United States
A credit freeze is free and must be requested separately from each of the three major credit bureaus. An initial fraud alert is also free and lasts one year; you can request it through one bureau, which must notify the other two. These tools concern credit files, so they do not replace checking other financial activity. A freeze and an alert are distinct measures; use the official bureau channels to place them and follow their current instructions.
Know what monitoring may miss
Credit monitoring does not necessarily alert you to bank-account withdrawals or fraudulent tax-refund claims. If you compare paid monitoring or recovery services, check which bureaus and records they cover, what alerts they provide, what they exclude, and the cost. You can also review free credit reports and follow official recovery steps without buying a service. Monitoring is not a substitute for reviewing bills and bank statements or acting on suspicious transactions. For U.S. guidance on freezes, alerts, and monitoring limits, see the FTC’s information about credit freezes and fraud alerts.
How to remove a listing from a people-search site
A people-search listing is different from an account you created with a service. Search for the listing and follow that site’s opt-out instructions; repeat for other sites where your information appears. The FTC says people can submit opt-outs one site at a time for free or pay a service to do them. The FTC’s overview explains the options: how to protect your privacy online.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Before paying for an opt-out service, compare the actual scope rather than relying on a promise that all information will disappear:
- How many people-search sites are covered?
- Does the service report where it submitted requests?
- How often does it check for information that returns or appears on a new site?
- What does the service cost, and what is excluded?
Manual opt-outs avoid paying for a service but mean handling each site’s process yourself. A paid option may save time, but coverage and follow-up vary. Ask whether the service performs repeat scans, since listings may return or appear elsewhere. Do not assume a paid service removes public records or can prevent all future listings.
Opting out removes a listing from a particular site; it does not remove the underlying public records. Information can reappear if source records change, so a one-time opt-out may not be permanent. Check the listing again later if ongoing visibility matters to you.
Which steps apply where you live?
The credit-freeze, fraud-alert, and IdentityTheft.gov procedures above are U.S.-specific. The right steps elsewhere depend on your country, the account provider, the type of information, and whether you see evidence of misuse. Use the provider’s official instructions and your local consumer-protection or identity-theft reporting channels. There is no single account-deletion deadline or universal right to erasure established for every location.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
In all cases, keep the response proportionate to what you found: secure an account you control, investigate concrete signs of unauthorized use, and use the appropriate official route for a provider account or a people-search listing. If you are unsure whether an unfamiliar account is yours, contact the service directly through a known, official channel rather than replying to a message that brought it to your attention.
Frequently Asked Questions
What should I do if I find an old account with my personal information?
First decide whether it is an account you recognize, an account with suspicious activity, or a people-search listing. Use the provider’s official site or app, secure an account you control with a unique password and available 2FA, and check bills, bank statements, and credit reports for unfamiliar activity. Finding an old account alone does not prove identity theft.
Should I delete an old account with my personal details?
If you no longer need it, use the provider’s current official closure or deletion controls. Save or transfer any files, records, purchases, or subscriptions you need and check whether the account is used for recovery elsewhere. Closure may not remove every copy of information, and there is no universal deletion process or deadline.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11What if I reused that password?
Change it everywhere you used the same or a similar password, prioritizing email and financially important accounts. Use unique passwords going forward, with a password manager or built-in generator if helpful, and check that a password manager supports MFA. Use passkeys where a service offers them.
How do I remove my information from people-search sites?
Find each listing and follow that site’s opt-out instructions; individual opt-outs are free. A paid service may handle multiple submissions, but compare site coverage, reporting, repeat checks, exclusions, and cost. Opting out does not remove underlying public records, and a listing can reappear.
Does credit monitoring catch every kind of identity theft?
No. FTC guidance warns that credit monitoring may not alert you to bank-account withdrawals or fraudulent tax-refund claims. Check bills and bank statements as well as credit reports, and use IdentityTheft.gov for a free recovery plan if identity theft has occurred or you need recovery steps.
The Bottom Line
Identify what you found before reacting: a dormant account, suspicious activity, and a people-search listing call for different steps. Secure accounts you control, replace reused passwords, and check financial and credit records for concrete signs of misuse. Use official provider controls to close an account or opt out, and remember that deletion and listing removal may not erase every copy of information.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
