The email changeover plan: what breaks when you lose the address tied to everything

Your email address is the master key to almost everything you own online, and when you lose access to it, or quietly stop checking an old ISP address, things break in the background where you won't see them until you need them.

Last reviewed: 21 July 2026

Why one email address holds everything together

When you forget a password, the reset link goes to your email. That's true for your bank, MyGov, your super, your socials, and every shop that's stored your card. The inbox isn't just another account, it's the recovery point for all the others.

That's a single point of failure. If you lose access to that address, whether a closed ISP account (a Bigpond, iiNet or TPG address when you switch providers), a forgotten password, or a hacked or deleted account, you can lose the ability to reset everything downstream at the same time. The accounts still exist; you just can't prove you own them.

A changeover is completely manageable if you plan it before you need it. Here's the plan.

Step 1: Give yourself a month of overlap

If you're moving off an old address, especially an ISP one that disappears when you leave the provider, don't switch cold.

  1. Set up a forward on the old address to your new one, so anything still arriving there lands where you'll see it.
  2. Turn on an autoreply that says you've changed address and gives the new one, so senders update their records.
  3. Keep the overlap for at least a month: a full billing cycle catches the quarterly and annual senders (insurance, rates, subscriptions) that only email occasionally.

If it's an ISP address, ask the provider how long the mailbox stays active after you cancel. Some cut it off quickly, which is exactly the trap.

Step 2: Map what's actually linked to it

Before you retire an address, find out what depends on it. Two ways:

  • Search the old inbox for "welcome", "verify your email", "receipt" and "confirm". The results are a rough list of every account that emailed you when you signed up.
  • Work down the important ones by hand: bank, MyGov, ATO, super, main shopping accounts, socials, and any other email accounts that use this one as their recovery address.

Step 3: Give every important account a current recovery email and phone

For each important account, open its security settings and make sure it has both:

  1. A current recovery email: your new address, not the one you're retiring.
  2. A current mobile number: one you actually still use.

Two independent ways back in matters. If a provider can only reach you at a dead email, you're relying on their slow manual identity checks, and for some services there isn't one.

Step 4: Keep an offline list

Write down, on paper, the accounts that matter and which email and phone each is tied to. Not the passwords, just the map. Keep it somewhere safe at home, with your important documents.

Paper survives the exact situation you're planning for: no power, no phone, no access to the very accounts you'd need to look things up in. A password manager is excellent for the passwords themselves, but a short written map of what's linked to what is the thing you'll be grateful for in an emergency.

Step 5: Set an emergency-access plan

If you were suddenly unavailable, through illness or an accident, could someone you trust get in to keep the essentials running, or close things down properly?

  • Google has Inactive Account Manager; Apple has Legacy Contact and Digital Legacy. Both let you nominate someone to reach your account under set conditions; check each provider's help pages for the current steps.
  • Tell one trusted person where the paper list lives and roughly what's on it. They don't need the passwords now, just to know it exists.
  • Check your password manager's emergency-access feature if it has one.

This isn't morbid. It's the same reason you leave a spare key with a neighbour. For a fuller walkthrough of who gets in if you can't, see our digital emergency kit.

The short version: your email is the reset point for everything, so never switch or abandon an address cold. Run a month-long forward and autoreply overlap, map what's linked before you retire the old address, give every important account a current recovery email and mobile, keep a paper map of what's tied to what, and nominate someone who can get in if you can't.

This is general information to help you plan, not advice about your specific accounts. If money has already moved or an account is compromised, contact your bank first, then report it via ReportCyber at cyber.gov.au; for identity misuse, contact IDCARE (1800 595 160). safe2recover doesn't log into or take over your accounts for you; this is guidance so you keep control of your own.