Summary

22 items · 1–2 hours

Why an Annual Digital Audit Matters

Your digital life accumulates clutter faster than almost any physical space. Over a typical year, you grant new app permissions, sign up for services you stop using, and let passwords age well past their safe lifespan — often without realising it. An annual check-in is the simplest way to stay ahead of these slow-building risks before they become real problems.

Think of it as the digital equivalent of a home walkthrough. Just as seasonal home maintenance helps you catch small issues before they become costly repairs, a structured digital review catches vulnerabilities while they're still manageable. You don't need to be a security expert to complete it — you just need a clear checklist and a focused hour or two.

This guide is designed to be worked through systematically. Use the tools below, follow the checklist groups in order, and take notes as you go. The goal isn't perfection; it's meaningful improvement.

Required

Password Manager

Centralises and audits all your passwords, flags reused or weak credentials, and generates strong replacements.

Required

Breach Notification Service

Checks whether your email addresses have appeared in known data breaches so you can act on compromised credentials.

Required

Cloud Storage Dashboard

Provides a single view of what is stored and backed up across your cloud accounts, and how much space remains.

Optional

External Hard Drive or NAS Device

Provides an offline, local backup copy of your most important files as a safeguard against cloud service outages or account loss.

Required

Bank or Card Statement (PDF or App)

Used to identify active subscription charges you may have forgotten, ensuring nothing slips through your audit.

How to Work Through the Checklist

Set aside uninterrupted time — ideally 60 to 90 minutes on a single sitting, or split across two sessions. Start with passwords and account security, since those areas carry the highest risk if neglected. Work outward from there to privacy settings, connected apps, and finally storage and backups.

For each item, the goal is to verify and act, not just skim and move on. If you discover a problem — a reused password, an app with excessive permissions, a subscription you'd forgotten — fix it before continuing. Small corrections add up quickly.

Act on Problems Immediately — Don't Defer

If the audit reveals a compromised password, an unrecognised connected app, or a missing backup, stop and address it before moving to the next checklist item. Deferring known vulnerabilities — even briefly — is when most preventable incidents occur. The checklist is only effective if action follows discovery.

If you manage accounts across multiple devices or household members, our guide on managing your digital life across multiple devices offers practical strategies for keeping everything organised and consistently secured.

Passwords & Authentication

Audit all passwords in your password manager and replace any that are reused, weak, or older than 12 months. Must
Enable two-factor authentication (2FA) on every account that supports it, prioritising email, banking, and cloud storage. Must
Review and update account recovery options — backup email addresses, phone numbers, and security questions. Must
Check whether any of your email addresses appear in known data breach databases using a reputable breach-notification service. Should
Remove any saved passwords stored directly in browsers and migrate them to a dedicated password manager. Should

Connected Apps & Account Permissions

Log into Google, Apple, Microsoft, and social accounts and revoke access for any third-party app you no longer actively use. Must
Review app permissions on your smartphone (location, microphone, camera, contacts) and disable any that aren't needed. Must
Check which devices are listed as authorised on your primary accounts and remove any you no longer own or recognise. Must
Review browser extensions and remove any that are unused, unrecognised, or from unknown developers. Should

Subscriptions & Digital Spending

Compile a complete list of active subscriptions by reviewing bank and card statements from the past 12 months. Must
Cancel any subscription service you haven't used in the past three months or no longer need. Should
Check free trials that have converted to paid plans and decide whether to keep or cancel each one. Should
Review subscription pricing — many services adjust rates annually, and it's worth confirming what you're currently paying. Nice to have

Privacy Settings & Data Sharing

Visit privacy settings on your most-used platforms (social media, email, streaming) and review who can see your profile and activity. Must
Opt out of ad personalisation and data-sharing settings where those options are available. Should
Review location history and activity data stored by your accounts and delete anything you don't want retained. Should
Download a copy of your data from major platforms to understand what has been collected about you. Nice to have

Backups & Data Security

Verify that automatic backups are running on all primary devices and that recent backup files are accessible. Must
Ensure critical files exist in at least two locations — such as both a cloud service and a local external drive. Must
Test restoring a backup file to confirm the process actually works, rather than assuming it will. Should
Archive or delete large files and folders you no longer need to reduce your storage footprint and backup clutter. Nice to have

Privacy Settings and Third-Party Access

Platform privacy settings are frequently updated by providers, and defaults often shift in ways that increase data sharing. A setting you locked down last year may have reverted or expanded after a terms-of-service update. This is one of the strongest arguments for a consistent annual review rather than a one-time configuration.

Pay particular attention to third-party app connections — the services you've authorised to access your email, calendar, or social accounts. These connections persist silently long after you stop using an app. Revoking access from unused tools is one of the highest-value actions in this entire checklist. For a deeper look at reading the fine print more efficiently, see why people keep skipping privacy policies.

Platform Settings Can Change After Updates

Major platforms routinely update their privacy settings after app or policy updates, sometimes resetting custom preferences to new defaults. Never assume your previous settings are still in place — log in directly and verify them. Checking once a year is the minimum; checking after any major platform update is even better.

Share

Tech & Gadgets Editorial Team · Contributor

Tech & Gadgets Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.

The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.