Merry Xmas: Google shuts down dormant accounts

Today may be the first day of the Christmas Advent Calendar – but it’s also when Google officially terminates accounts that have been dormant for two years or more.

The tech giant has announcedit will shut down any account that “has not been used within a two-year period” starting from December 1st, 2023.

It added: “This policy applies to your personal Google Account [but] doesn't apply to any Google Account that was set up for you through your work, school, or other organization.”

However, the new policy also applies to data stored on Google products including YouTube, Chrome, and Maps.

Google adds that an account considered active and therefore exempt from termination includes one that has been used to send, resend, or receive emails, watch or share a video, or download an app.

A cybersecurity spokesperson welcomed the move by Google, warning that accounts left dormant for a long time can be exploited by online criminals.

“Inactive accounts can present significant cybersecurity risks, as these accounts may retain weak or unchanged passwords, creating vulnerabilities for unauthorized access and potential misuse by cybercriminals for phishing attacks or data exposure,” said Patrick Tiquet of Keeper Security.

He added: “When you combine the personal information stored in these accounts and potential interconnections to other services, there is a heightened risk of identity theft and unauthorized access to linked accounts.”

Tiquet also warned that dormant accounts allowed to lie forgotten could furnish cybercriminals with a space in which to operate free of scrutiny, giving them more time to prepare and launch attacks.

“The lack of monitoring for inactive accounts increases the likelihood of users being unaware of suspicious activities, allowing bad actors more time to exploit the compromised accounts,” he said.