You can always reset the password for a user on your domain. This is helpful when:
- A user forgets his or her password
- A user's account is compromised (security concerns)
To reset a user's password:
- Sign in to the Google Admin console.
- Find the user account. You can either search or browse:
- Search: Enter the user name in the search box at the top of the Google Admin console, then click Search accounts.
- Browse: Click Users. Select an organization from the organizational structure.
- Click the row for the user account to display the user information page.
- Click Change password.
- Enter the user's new password in the Password: field, and then enter it again in the Re-enter Password: field to confirm the change.
When you enter the password, the Password strength field below the text boxes evaluates the security level of the password. Click the link if you want tips for creating strong passwords. Google requires a password that's at least eight characters, especially for optimal use with IMAP or POP.
- Specify whether you want to force the user to change the password the next time he or she signs in.
Select the Require a change of password in the next sign in check box to require the user to create a new password. Note: For third party clients using application specific passwords, you may be required to regenerate and enter your password again.
- Click Save Changes along the bottom.
Once you've reset a password, be sure to provide the user with new login information.
Read more on Google Apps Security and Privacy issues.