Every account you have, in one list

Why keep a list of your accounts

An account list answers questions you only ask in a hurry:

• An email address leaked or was taken over. Which accounts can be reset through it? Grouping by email shows exactly those.
• You are changing your phone number. Which accounts send codes to it by text message?
• You are moving to a new email address. Which accounts still send everything to the old one?
• You lost access to your Google or Apple account. Every account you open with “Sign in with Google” or Apple goes with it.
• You want a smaller footprint. Fewer accounts mean fewer places that can leak your data; the To close list turns that into a to-do list.

Without a list, people find these things out one painful reset at a time.

What the overview shows

Across the top, four tiles: how many Accounts you have and across how many emails and phones, the share With two-step sign-in, the number Without two-step (a password alone guards them) and the number To close.

Under Your emails and phone numbers, each address gets a card with its number of accounts and how many of them have two-step sign-in. Click one to see only its accounts. A login whose user name is an email address is grouped by it on its own.

The list can be narrowed to No two-step, Two-step not noted, No recovery codes, Password at risk (leaked, weak or reused), To close or Closed. Each row carries small labels for the sign-in method, two-step, recovery codes and any password problem, and says how old the password is.

What it does not do

The account manager is a list you keep, not a search engine. It does not scan your inbox or the web to discover accounts: they come from the logins in your vault and from what you add. To find forgotten ones, search your email for words like “welcome” or “verify your email”, and add what turns up.

It also does not close accounts for you. Each site has its own way, usually under account or privacy settings. Mark the account Closed when it is done, and it stays in the list with the date, so you remember you dealt with it.

Everything lives in the same encrypted vault file as the password manager, on your PC. Changing an account there changes the login, and the other way round.

A tidy-up plan

Do it properly once, then add each new account as you sign up. A good order:

• Email first. Add every email account, turn on two-step sign-in and save the recovery codes. Everything else can be reset through these.
• Then money and identity: banks, payment apps, shops that keep your card, government and health sites.
• Then the accounts you open with Google, Apple or Microsoft. Note how you sign in, so you know what depends on those three.
• Clear the warnings. The Password at risk filter lists leaked, weak and reused passwords; give each a new one.
• Close what you no longer use. Mark them To close and work down the list, one site at a time.

The No recovery codes filter catches the step people skip most: two-step sign-in turned on, with no way back in if the phone is lost.