If a user forgets the password for their managed Google account (for example, their Google Workspace or Cloud Identity account), or if you think their account has been compromised, you can reset their password from the Google Admin console.
These steps don't apply if your account uses a single sign-on (SSO) with a third-party identity provider. Learn more
Reset a User's Password
After changing a password
After you reset a password, the user is signed out of all active sessions. To reopen their apps, the user needs to do the following:
- Google web apps (such as Gmail or Google Drive)—The user has to sign in again with their new password.
- Google apps on Android—The user is notified they need to verify their identity by signing in to their account. Already synced data—for example, email already received in Gmail—is still accessible, but no new emails can be sent or received until the user signs in again with their new password.
- Google apps on Apple iOS—The user's Google account is removed from the account list. The user has to add their account again, then sign in with their new password.
- Third-party apps connected via OAuth—Third-party mail apps like Apple Mail and Mozilla Thunderbird―as well as other applications that use mail scopes to access a user’s mail―will stop syncing data after a password reset, until a new OAuth 2.0 token is granted. A new token is granted when the user signs in with their Google account username and new password. For details, go to Automatic OAuth 2.0 token revocation upon password change.
- Third-party apps that require application-specific passwords (ASPs)—When 2-Step Verification is in use, application-specific passwords (ASPs) may be required to use legacy applications that don't support OAuth. After a password reset, all ASPs are revoked and need to be regenerated. For details, go to Sign in with App Passwords.