A 15-Minute Inbox Hygiene Routine That Actually Sticks
Your main email address is the key to almost every account you own. Keeping it clean is not about reaching "inbox zero"; it is about fewer places that know the address, fewer messages competing for attention, and fewer surprises when something goes wrong. This routine takes about fifteen minutes once a month.
Why bother?
- Security: every service that stores your address can leak it. Fewer services, fewer leaks, fewer targeted phishing emails.
- Attention: when the inbox is full of promotions, the one important message (a fraud alert, a password reset you did not ask for) is easy to miss.
- Recovery: a tidy inbox with working filters makes it obvious when an account sends you something unusual.
Minutes 1–4: unsubscribe from what you never read
Search your inbox for the word unsubscribe and sort by sender. For every newsletter or store you have not opened in the last month, use its unsubscribe link. Many mail services also show an unsubscribe button next to the sender's name for bulk mail.
- Use the unsubscribe link only in messages from companies you recognise. For obvious spam, mark it as spam instead: clicking "unsubscribe" in real spam just confirms your address is active.
- Prefer "receive fewer emails" options when a service offers them. Sometimes you want the receipts, not the promotions.
Minutes 5–7: set up two or three filters
Filters do the sorting for you. A few that help almost everyone:
| Filter | Rule | Result |
|---|---|---|
| Receipts | Subject contains "receipt", "order" or "invoice" | Label it and skip the inbox |
| Newsletters you keep | From the specific senders you value | Move to a "Reading" folder for the weekend |
| Security messages | From your bank and main accounts | Mark as important, never archive automatically |
If your provider supports plus addressing, signing up as you+shop@ makes filters even easier. Our comparison of disposable addresses, aliases and plus addressing explains the trade-offs.
Minutes 8–10: review where your address is used
Search your mailbox for "welcome", "confirm your email" and "verify your account". The results are a rough map of every service that has your address. For each one you no longer use:
- sign in and delete the account if the service allows it;
- if not, remove saved payment details and personal information;
- if it is something you might use rarely, change its email to an alias.
Each deleted account is one less database that can leak your address in the future.
Minutes 11–13: check your recovery and security settings
- Make sure your mail account's recovery phone number and recovery email are current.
- Check that two-factor authentication is on for the mailbox itself. Whoever controls your email can reset almost everything else.
- Look at the list of devices and apps signed in to your mail account and remove anything you do not recognise.
- Check forwarding rules and filters for anything you did not create. Attackers who break into a mailbox often add a hidden forwarding rule to keep reading your mail.
Minutes 14–15: decide where future sign-ups go
The best hygiene is not letting the mess in. Before your next sign-up, decide which address it deserves:
- Real address for money, work, government, health and family.
- An alias for shops, subscriptions and communities you will come back to.
- A mail generator for one-off downloads, coupons and quick trials. See when to use a mail generator.
A simple rule of thumb
If you would not give a stranger your phone number for it, do not give it your main email address either.
Signs your address may have leaked
- A sudden jump in spam, especially messages that use your name.
- Phishing emails that mention a specific service you use.
- Password reset emails you did not request.
- Messages addressed to the exact alias or plus tag you gave one particular site.
If you see these, change the password for any account that shared a password with the leaked service, and turn on two-factor authentication wherever it is available. Then be extra careful with the next few emails that ask you to "verify" something; our guide How to Spot a Phishing Email covers the checks.
Summary
Once a month: unsubscribe, filter, prune old accounts, check security settings and decide where new sign-ups go. Fifteen minutes keeps your main address known to fewer services, easier to protect and much calmer to read.