As a super administrator for your organization, you can let users and admins add their own password recovery details.
Before you begin
- This setting is turned on by default for all users except for Google Workspace for Education users under the age of 18, where it is turned on only for super admins.
- Phone recovery is turned on by default for super admins. Super admins can use phone recovery even if the setting is turned off.
- The recovery information collected might be used to deal with security issues, such as problematic sign-ins and reauthentication.
- If an admin turns off the setting after a user adds their recovery information, only admins can remove those details from the user's page in the Google Admin console.
Allow users to add recovery details
You must be signed in as a super administrator for this task.
Before you begin: If needed, learn how to apply the setting to a department or group.
-
Sign in with a super administrator account to the Google Admin console.
If you aren’t using a super administrator account, you can’t complete these steps.
-
(Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how
Group settings override organizational units. Learn more
- Click Recovery information and check the relevant boxes to allow admins and users to add email or phone recovery information, or both, to their account.
-
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group).
Important: Immediately remove a user's recovery information when they leave your organization or if their account might be hijacked. For details go to Add or update a recovery email address or phone number.
