Digital Footprint Audit: A Practical Action Checklist

Key takeaways

• Make an identifier inventory
• Inspect what a visitor can see
• Use discovery tools to find candidates

Make an identifier inventory

List current and old usernames, email addresses and services you remember joining. Keep that inventory private. Start with your password manager and signup emails: these can reveal accounts that a public search will miss. Do not paste password-manager exports into a search tool. Prioritize accounts connected to payment, recovery email or sensitive public information before abandoned hobby profiles.

Inspect what a visitor can see

Open your known public account URLs in a signed-out browser window. Note visible biography fields, workplace, contact details, location clues, public posts and linked accounts. A login wall is an unavailable observation, not proof your account is private. Compare the signed-out view with the audience settings inside your account. For GitHub, check profile and commit-email settings separately; for social platforms, account privacy may not remove every comment or old search snippet.

Use discovery tools to find candidates

Search old handles separately in the MyRecon username sweep. The standard catalogue covers 500+ platforms; guest previews, signed-in scan limits and paid Extended scope differ. Check current pricing before assuming all results are available. Open each candidate at the original source and confirm it using your records. MyRecon does not enumerate every email-linked account, access private profiles or close accounts for you.

Turn exposure into a prioritized task

Use one row per confirmed account: URL, ownership confirmed, public fields, recovery checked, action and verification date. Choose keep and secure, reduce visibility, delete, or ownership unresolved. For kept accounts, use a unique password and multifactor authentication where available. Update the recovery email before losing access to an old address. For deleted accounts, export wanted material and remove linked application permissions through the provider.

Worked example: an old forum profile

Illustrative entry: an old handle resolves to a forum profile, your saved signup email confirms it, and a public biography names an employer you no longer work for. Action: update the biography and review public posts; enable available account protections. Verification: reopen the profile signed out and record the changed fields. If you cannot log in and the signup email is gone, mark ownership unresolved and follow official recovery. Do not claim the account is yours merely because its handle matches.

Recheck what changed

After a privacy change or deletion request, revisit the exact page and record the outcome. Search engines may retain old snippets after the source changes, and other users may have quoted posts. Schedule a review after your next job change, email migration or major handle rename. Keep the audit log short and delete redundant screenshots once actions are verified. The audit cannot certify that no information about you exists anywhere online.