What Happens to an Abandoned Mailbox

Time: forty minutes to retire one mailbox properly. Repeat: once per mailbox, plus one hour a year for the ones you keep.

Assume the mailbox will be deleted, not stored

Expect an unused mailbox to be removed, because that is what providers have published that they will do. The idea that an old account sits harmlessly on a server until you come back for it stopped being true some years ago; storage costs money and dormant accounts are a security liability, so the major providers all now define an inactivity period after which the account and its contents are erased.

Look up the exact period for your provider rather than guessing at it, since it varies by company and by whether you are paying them. It is published in their help pages, it is expressed as a number of months or years, and it is not negotiable afterwards. What matters here is not the number but the fact that a clock exists and it is already running on every mailbox you have stopped opening.

Count sign-ins, because receiving mail is not activity

Sign into the account if you want it to stay alive. Almost every provider defines activity as you authenticating, not as mail arriving.

This catches people who set up forwarding and consider the problem solved. Forwarding runs on the provider's side without you ever authenticating, so the mailbox continues to look abandoned no matter how much traffic passes through it. The day it is deleted, the forwarding goes with it and the mail simply stops, usually without any announcement you would notice.

A mail program checking the account over IMAP counts as a sign-in on most providers, and paying for storage keeps a few accounts alive regardless. Neither is something to assume without checking. Opening the account in a browser twice a year is the version that works everywhere.

Know what leaves with the mailbox

Understand that the deletion is rarely limited to email. On providers that also sell you storage, documents, photos and backups, the account is one account, and all of it goes together.

Purchases and subscriptions attached to the account go too: books, apps, media licences, cloud plans and anything else bought under that identity. Beyond the provider's own services, every other account that lists this address as its recovery contact loses its safety net at the same moment. Those are the expensive ones, because the loss is invisible until the day you need a password reset and it goes to a mailbox that no longer exists. Setting recovery up so it does not depend on a single mailbox is covered in recovery options that hold up.

The address itself is the last part. Most providers do not hand a deleted address to anyone else, and their help pages usually say so. Some do reissue after a delay. Where that happens, mail meant for you arrives for a stranger, and nothing about the message tells them it is not theirs.

Find out what still points at the address before you stop using it

Inventory the account's connections before you decide anything, because retiring a mailbox is safe only when you know what depends on it. Half an hour with a password manager, the mailbox's own search history and a card statement will surface almost everything; the four sources and how to work through them are in finding every account tied to an address.

Pay particular attention to three categories: anything that can send a password reset here, anything that bills a card, and anything with a second factor whose backup route is this mailbox. Those decide whether you can retire the account this month or need to spend a few weeks moving things first.

Close a mailbox in this order

Retire a mailbox in five steps, and do them in this sequence rather than in the order the provider's settings page suggests.

First, take a full copy of the mail and confirm you can open it, because after the account is closed there is no second attempt. Second, move the accounts that use this address, starting with anything that can reset another account. Third, check that no remaining account lists this mailbox as a recovery contact. Fourth, clear out attachments and downloads that only exist inside this mailbox, which is also a good moment to see what was actually in there; what is safe to delete applies just as well to a mailbox you are closing. Fifth, and only then, either close the account through the provider's own process or set a reminder to sign in twice a year for as long as you keep it.

Closing it yourself has one advantage over letting it expire: it happens on a day you chose, with your archive already made and checked.

Do not simply stop signing in

Reject the idea that ignoring a mailbox is the same as being finished with it. It is the same decision with the timing handed to somebody else.

An account you retire deliberately is deleted after you have taken a copy, moved what depended on it and confirmed nothing is pointing at it. An account you abandon is deleted on the provider's schedule, which will not coincide with your convenience, and the first sign is usually a failed password reset months later on a service you had forgotten. The work is identical. Only the sequence changes, and the sequence is the entire difference between a tidy retirement and a bad afternoon.

The same reasoning is why a throwaway address is a sensible tool for the signups you know you will never return to. An inbox that expires by design removes the cleanup entirely, because there was never an account to retire.

Treat a relative's mailbox as a separate job

Do not apply this procedure to someone else's account. A mailbox left behind when a person dies, moves into care or simply disappears is a legal and practical problem rather than a maintenance one, and the provider will not treat you as the owner.

Signing in with a password you happen to know is the instinctive move and it is the wrong one in several countries. What providers actually offer, and what a person can set up in advance so their family is not stuck, is in your mailbox after you are gone. If you are dealing with this now, start there rather than here.

Open every mailbox you still own once a year

Book an hour a year to sign into every mailbox you have not closed. Make a list of them first; most people own more than they can name from memory, including one from a school, one from a former job, and one made for a single purpose in about 2014.

For each: sign in, glance at what arrived, confirm the recovery details still make sense, and decide whether you are keeping it. If you are keeping it, the sign-in has already done its job for another year. If you are not, run the five steps above while you are still in there. An hour a year is what stops this from becoming a problem you discover through its consequences.

The checklist

• Look up your provider's published inactivity period instead of assuming it is generous.
• Sign into every mailbox you intend to keep at least once a year; forwarding does not count.
• Before retiring one, copy the mail, verify the copy opens, and move everything that depends on the address.
• Check that no surviving account lists the mailbox as a recovery contact.
• Close accounts you are finished with on purpose, rather than by walking away.
• Keep a written list of every mailbox you own, stored outside all of them.