Who has the keys?

Google Workspace: keep the keys with the business

The super admin of a Google Workspace account controls every mailbox on the domain. One super admin is one person away from a locked business.

Every step below is from Google Workspace’s own help pages, checked on 6th October 2026. Screens change: if a step doesn’t match what you see, the linked page is the one to trust. Nothing here needs you to share a password.

Add a second super admin

In your register this is field N.4 of the Google Workspace account.

  1. In the Admin console, go to Menu, Directory, Users, and open the person’s account.
  2. Select Admin roles and privileges, then the Super Admin role.
  3. Switch Super Admin to Assigned and select Save.

Give the role only to people you trust, and have them add recovery options to their own account.

Source: Google: make a user an admin

Turn on 2-Step Verification for everyone

In your register this is field N.6 of the Google Workspace account.

  1. As a super admin, go to Menu, Security, Authentication, 2-step verification.
  2. Tick Allow users to turn on 2-Step Verification.
  3. Set Enforcement to On, or to a start date, then select Save.

Source: Google: deploy 2-Step Verification

All fix guides

See what your domain depends on.