How long should I keep my old email address active after moving?

There is no fixed rule, but three to six months is a common approach. The right period depends on how many accounts you have and how often they contact you. Keep the old inbox forwarding and check it periodically for password resets and security alerts, which reveal accounts you have not yet migrated. Close it only when you are confident nothing important remains.

What should I update first when changing my email address?

Start with your password manager and your primary recovery mailbox, because they control access to everything else. Then move to banking, payment and government accounts, followed by work, cloud storage and app stores. Social media, shopping and newsletters come later. Forums and one-off signups can often be abandoned rather than migrated.

Will I lose access to accounts if I close my old email too soon?

Possibly. Many services only send password resets and security alerts to the address on file. If you close the old inbox before updating every account, you may be locked out and forced to contact support to prove ownership. Keeping the old address alive and forwarding for several months is the simplest way to avoid this.

Can I use a disposable email address for my main accounts?

No. Disposable inboxes are temporary by design and are not meant for accounts you need to recover. Use them for one-off signups, downloads and trials where losing access does not matter. For anything involving money, identity or long-term data, use a real mailbox you control, ideally with strong two-factor authentication.

How do aliases make moving email easier in future?

An alias gives each service its own address that forwards to your real inbox. If you change providers, you update the forwarding rule once rather than logging into every account. If an alias starts attracting spam, you disable it without affecting the others. This keeps your primary address private and makes future migrations far less disruptive.

How to Move to a New Email Address Without Losing Accounts

To move to a new email address without losing accounts, you need to treat it as a migration rather than a rename: inventory every service tied to the old address, update the most critical accounts first (banking, government, work, password manager), keep the old inbox alive and forwarding for a few months, and update recovery addresses and two-factor settings as you go. The aim is that no account is left pointing at an address you can no longer read.

Why does a straight email swap go wrong?

Most people change email in a hurry. They create a new address, tell a few friends, and assume the rest will sort itself out. It rarely does. Accounts you forgot about keep sending password resets and security alerts to the old inbox. If that inbox is closed or you lose access, recovering those accounts becomes a support-ticket ordeal at best and impossible at worst.

The risks are predictable:

Recovery dead ends. Many services will only send a password reset to the address on file. If you cannot read it, you cannot reset.
Silent security alerts. Login notifications, breach warnings and two-factor prompts go to the old address and stop reaching you.
Lost purchases and licences. Software, domain names, cloud storage and app stores are often tied to an email login rather than a username.
Subscription and billing drift. Recurring payments continue while the account behind them becomes unreachable.

None of this is exotic. It is the normal consequence of treating an email address as a label rather than as a key.

Step 1: Build an inventory before you change anything

Do not create the new address first. Start by listing what the old one controls. The most reliable way is to search your mailbox, because the evidence is already there.

Search for “welcome” and “verify”. Signup confirmation emails are the best record of accounts you have created, including ones you have not used in years.
Search for “password”, “reset” and “security alert”. These reveal accounts that treat your address as a recovery route.
Search for “receipt”, “invoice” and “subscription”. Anything that bills you needs special care.
Check your password manager. If you use one, its list of saved logins is a ready-made inventory. Export it to a spreadsheet if that helps.
Check your phone and browser. Saved logins, autofill entries and app store accounts often reveal services you have forgotten.

Record each entry with three fields: the service name, whether the old address is the login or just a contact point, and whether the account holds money, data or identity documents. That last field determines the order of migration.

Step 2: Choose the new address with the next move in mind

Before you commit, decide what kind of address you actually need. A single personal address is simplest, but it concentrates risk: one breach or one spam flood affects everything. That is why many people now use a layered approach.

A primary address for banking, government, work and anything involving identity or money. This should be a real, long-term mailbox you control, ideally with strong two-factor authentication.
Aliases or plus-addressing for shopping, newsletters and forums. These forward to your primary inbox but can be switched off individually if they start attracting spam. Our guide to email aliases vs disposable email explains the difference in detail.
Disposable addresses for one-off signups, downloads and trials where you never intend to return. These are not a replacement for a primary address; they are a way of keeping low-value signups out of it.

If you are unsure whether a service deserves your real address, ask what happens if you lose access. If the answer is “I lose money or data”, it deserves the primary address. If the answer is “nothing much”, an alias or a disposable inbox is the better fit.

Step 3: Migrate in the right order

Order matters because some accounts can lock you out of others. Work through this sequence and do not skip ahead.

Your password manager. If you use one, update its email and recovery settings first. It is the key to everything else.
Your primary recovery mailbox. If you have a secondary address used for recovery, update that too, so you are not dependent on a single inbox.
Banking, payments and government services. These are the accounts where a lockout causes real harm. Update the email, then check the recovery phone number and security questions while you are there.
Work and professional accounts. If your employer uses a separate work address, make sure personal accounts are not pointing at it.
Cloud storage, app stores and software licences. These often hold years of data and are easy to overlook.
Social media and messaging. Update the email and check whether the account also uses a phone number for recovery.
Shopping, subscriptions and newsletters. Lower risk, but worth doing so that receipts and renewal notices reach you.
Forums, downloads and one-off signups. Many of these can simply be abandoned. If you no longer use the service, close the account rather than migrating it.

At each step, do not just change the email field. Look for the recovery address, the backup address, and any “security questions” or trusted-device settings. These are the parts people forget, and they are the parts that matter when something goes wrong.

How long should you keep the old address forwarding?

Do not close the old inbox on the day you switch. Keep it open and forwarding to the new address for a period long enough to catch stragglers. How long depends on how many accounts you have and how often you use them; three to six months is a common approach, but there is no universal rule. Some services only contact you annually, and some send a security alert months after a breach.

During the forwarding period:

Check the old inbox periodically, not just the forwarded copy. Some senders are blocked by forwarding rules.
Watch for password reset emails arriving at the old address. Each one is an account you have not yet migrated.
Keep the old address’s two-factor authentication active until you are confident nothing important remains.

When you do close it, do so deliberately: log in one last time, search for recent messages, and only then deactivate. If the provider deletes the address and later reassigns it to someone else, any account still pointing there becomes a security risk to you.

Step 5: Update recovery addresses and two-factor settings

Changing the login email is only half the job. Recovery addresses and two-factor methods are what let you get back in when something breaks. As you migrate each account, check:

Recovery email. Point it at the new address or a trusted secondary address you still control.
Recovery phone. If the number is old, update it now rather than during an emergency.
Two-factor methods. If you use SMS codes, consider whether an authenticator app or passkey would be more resilient. Our guide to two-factor authentication compares the options.
Trusted devices and app passwords. Old devices may still have access. Review and revoke anything you no longer use.

This is also a good moment to check whether any account still uses a password you have reused elsewhere. A migration is a natural audit.

Step 6: Use aliases so the next move is easier

The real lesson of a migration is that a single address tied to dozens of accounts is fragile. The next time you move, you want to change one thing, not fifty. Aliases and plus-addressing make that possible.

With an alias, each service gets its own address that forwards to your real inbox. If you change providers, you update the forwarding rule once. If an alias starts receiving spam, you disable it without touching the others. Gmail’s plus-addressing works similarly but is less private because it reveals your base address; our Gmail plus addressing guide covers where it works and where it fails.

For signups you do not care about, a disposable inbox is the right tool. It keeps low-value mail away from your primary address and makes it obvious which services are not worth migrating. If you are setting one up for the first time, our step-by-step guide covers the basics. The key point is that disposable inboxes are temporary by design, so never use one for an account you would need to recover.

What breaks during an email migration, and how do you handle it?

Even a careful migration can hit problems. The common ones are predictable.

A service only allows one email change per period. Some platforms rate-limit changes. If you are blocked, note the account and return later rather than creating a duplicate.
Verification codes go to spam. New addresses have no reputation, so codes can be filtered. Check the spam folder and add the sender to your contacts. Our guide to verification email not arriving lists the checks in order.
The old address is required to confirm the change. This is why you keep it alive. If you have already lost access, contact the service’s support directly and be prepared to prove ownership another way.
Two-factor is tied to the old address. Update two-factor before you close the old inbox, not after.
You are locked out mid-migration. Stop and fix access before continuing. Migrating other accounts while one is broken only spreads the problem.

If an account is genuinely unrecoverable, document it and move on. Do not create a duplicate account with the same service unless you are sure it will not cause billing or identity conflicts.

Sources

RFC 6409: Message Submission for Mail — explains submission and forwarding behaviour relevant to keeping an old address alive.
RFC 5322: Internet Message Format — the standard defining how email addresses and message headers are structured.
NIST SP 800-63B: Digital Identity Guidelines — guidance on authentication and recovery factors.

In short

Moving to a new email address safely is a project, not a click. Inventory your accounts first, migrate in order of risk, keep the old inbox forwarding for months rather than days, update recovery addresses and two-factor settings as you go, and use aliases so that the next move touches one forwarding rule instead of fifty accounts. The goal is simple: no account should depend on an inbox you can no longer read.