What to do if you lose access to your Google or Microsoft admin account

Go to the Google Workspace sign-in page at accounts.google.com and enter your admin email address.

Click "Try another way" when prompted for your 2FA code. Google offers several fallback options: backup codes, a text message to a recovery phone, or a verification email to a recovery address. Try each one.

If you have backup codes, enter one now. If you set up backup codes when you enabled 2FA, they should be stored in your password manager or a secure document. This is the fastest path.

If you have no backup codes and no recovery method, proceed to the domain verification recovery below.

Go to accounts.google.com/signin/recovery and enter your admin email address. Follow the prompts — Google will ask identity verification questions.

If Google's automated recovery doesn't work, go to the Google Workspace admin recovery form. You'll need to verify that you own the domain.

Verify domain ownership. Google will ask you to add a TXT record to your domain's DNS settings. Log in to your domain registrar (the company you registered your domain with — see how to find where your domain is registered), and add the record Google provides.

Wait for DNS propagation. DNS changes can take a few minutes to a few hours to take effect. See DNS propagation explained.

Return to the recovery form and confirm the record is in place. Google will then allow you to reset your admin password.

Check whether another admin exists in your organization. Any Google Workspace admin can unlock or create accounts. Ask any colleague who might have admin access to check their account.

If no other admin exists, use the domain verification recovery process above to regain access via domain ownership proof.

Once you regain access, immediately create a second admin account as a backup. Go to the Google Admin console, click Users, then Add new user, and assign the Super Admin role to a trusted person or to a shared account you control.

Go to login.microsoftonline.com and click Can't access your account? below the sign-in form.

Select "Work or school account" and enter your admin email address.

Choose a verification method. Microsoft will offer to send a code to a recovery email or phone number registered to your account. Choose one and enter the code.

Reset your password. Once verified, you'll be prompted to create a new password.

Check for another global administrator. In Microsoft 365, any Global Administrator can reset another admin's authentication methods. Ask a colleague with admin access to sign in to the Microsoft 365 admin center at admin.microsoft.com and reset your account.

If you are the only Global Administrator, you'll need to contact Microsoft support directly. Go to admin.microsoft.com/adminportal/home and use the Help icon, or go to support.microsoft.com to open a support ticket.

Microsoft will verify your identity. They may ask for your billing information, the last four digits of the credit card on file, or your organization's details. Have these ready.

Once access is restored, set up a second Global Administrator account immediately. Go to the admin center, choose Users, select Active users, and assign the Global Administrator role to a trusted backup account.

Check whether another Global Administrator exists. They can sign in and reassign the admin role to a current employee.

If no other Global Administrator exists, contact Microsoft support using the steps above to verify ownership and regain access.

Consider blocking the former employee's account while you work through this. A Global Admin can do this from the admin center — see removing a user safely.

Always have at least two Global/Super Admins. One can be a shared account like admin@yourbusiness.com; keep its credentials in your password manager.

Set up recovery phone and email on every admin account. In Google Workspace, do this under your account's Security settings. In Microsoft 365, do it under account sign-in info.

Save 2FA backup codes in your password manager the moment you enable 2FA. See setting up two-factor authentication.

Give us delegated admin access. This gives us a safe back-door for exactly these emergencies. See give us Google Workspace admin access and give us Microsoft 365 admin access.