Skip to main content

Block Self-Service Account Recovery in Google Workspace

How to require additional verification for password resets for both admins and standard users in Google Workspace.

Written by Kavi Harshawat
Updated over 2 weeks ago

Overview

By default, Google Workspace allows users and administrators to reset their own passwords without additional verification. Disabling this means accounts must go through a more secure recovery process if access is lost, reducing the risk of account takeover through self-service recovery.

Prerequisites

  • Super Admin access to the Google Admin console

Instructions

  1. Sign in to the Google Admin console

  2. Navigate to Security > Authentication > Account recovery

  3. Under Super admin account recovery, toggle the setting to Off

  4. Under User account recovery, toggle the setting to Off

  5. Save your changes
    ​

⚠️ Once disabled, anyone locked out of their account will not be able to recover access on their own. Make sure your organization has a process in place for account recovery before making this change.

Did this answer your question?