BlogRECOVER ACCESS6 min read

Your only Google Workspace admin left. Here's how to recover control.

Steps verified against the official documentation below · last checked 2026-07-18

Google Workspace is usually the most concentrated point of failure in a small business: everyone's email, the shared drives, the calendar, and the password resets for half your other tools all hang off it. And in a lot of companies, exactly one person holds the super admin role — the founder's old IT contact, an early employee, an outsourced consultant.

When that person leaves and nobody can reach the admin console, you can't add or remove staff, can't reset passwords, can't change billing. Here's the recovery path Google actually supports, and the setup that makes sure you never need it twice.

If they're still reachable, do it the easy way

The fastest recovery is no recovery: get thirty minutes with the departing admin before (or even after) they leave. Have them sign in to admin.google.com and grant the super admin role to an account the company controls. Verify you can sign in and see the Admin console before you end the call.

Do this during offboarding, every time, and the rest of this article stays theoretical.

The supported recovery: prove you own the domain

If no reachable person holds super admin, Google's recovery flow can promote an account you control — after you prove control of the domain the Workspace is registered on.

1
Start the recovery wizard
Go to Google's admin account recovery form (toolbox.googleapps.com/apps/recovery/form), enter your domain, and choose the option for a user who cannot contact their administrator.
2
Add the DNS record Google gives you
You'll be asked to add a unique TXT or CNAME record to your domain's DNS — this is the proof of ownership.
3
Wait for verification
DNS changes can take up to 48 hours to propagate; Google checks periodically. Once verified, you'll be guided through resetting the super admin password or promoting your account.
4
If self-recovery fails, escalate
The wizard can hand off to a support-assisted recovery flow where Google's team verifies you by other means.

Spot the dependency: this recovery requires control of your domain's DNS. If the domain is also in someone else's hands — an agency, the same departed person — fix that first. One ownership gap is often hiding another.

Make sure this never happens again

Have at least two — Google's guidance suggests two to three — super admins, on accounts owned by different people in the business.
Add recovery phone and email to each admin account, and allow super admins to recover their own passwords in the Admin console's security settings.
Keep the admin accounts on your domain, not on personal Gmail addresses.
Record who holds the role in your asset register, and re-check it whenever someone leaves.

SOURCES & OFFICIAL DOCUMENTATION

Google Workspace — Recovering administrator access to your account Google Workspace — Allow super administrators to recover their password

This is one asset. How many others does your business not control?

The free scan maps your domain, email, cloud, social and tools from public records — and shows what you'd lose access to tomorrow. No login, nothing to install.

Check my business

KEEP READING

Your web agency owns your domain. Here's how to get it back.

7 min read

How to find out who your domain is actually registered to

5 min read