Skip to content

Reset a staff member's Google Workspace password in the Admin console

Updated For Google Workspace

Baca dalam Bahasa Melayu

If a staff member forgets their password and cannot get back in, an admin can reset it directly in the Admin console, without needing the old password.

  1. Go to Directory > Users.
  2. Point to the user in the list and click Reset password, or open their account page and choose it there.
  3. Choose Automatically generate a password (the user must change it at next sign-in), or choose Create password and type one (at least 8 characters by default, or longer if your password policy requires it).
  4. If you created the password, tick Ask the user to change their password.
  5. Click Reset.

This is the admin-side option for when a user’s own forgot password recovery does not work.

Click Copy password to share it, ideally by phone or WhatsApp rather than email if you suspect compromise.

If the user is also stuck at 2-Step Verification

Section titled “If the user is also stuck at 2-Step Verification”

Do not disable 2-Step Verification to work around this. Instead, open the user’s account, go to Security > 2-step verification, and click Get Backup Verification Codes to generate a new set. Share one code with the user so they can sign in and reconnect their verification method themselves.

Reset the password first, then on the user’s Security page, find Sign-in cookies and click Reset. Together with the new password, this signs them out of active browser sessions, and on phones they must sign in again. Third-party mail apps such as Outlook or Apple Mail stop syncing until the user signs in with the new password.

WhatsApp our support team at +60 16-916 3324.

Common issues

Can an admin see a staff member's current password?

No. The Admin console does not display a user's existing password. You can only set a new one from Directory > Users and pass that on instead.

Does resetting the password sign the user out of their phone and apps right away?

Not completely on its own. Third-party mail apps stop syncing until the user signs in with the new password. To sign them out of browsers and phones too, also reset their Sign-in cookies on the user's Security page.

Should I turn off 2-Step Verification if the user is locked out of it too?

No, that weakens the account. Generate a backup verification code instead so the user can sign in once and set up their verification method again.

Was this article helpful?

Cookie settings

We use Google Analytics to see which guides help and where readers get stuck. It is on by default; you can turn it off. Your choice is saved on this device.