Control whether your users can add account recovery information with two new admin settings

15/01/2025

Table of contents

What’s changing

Google is launching two new settings that will allow admins to control whether their users can add recovery email information and phone information to their Google Workspace account.

By default, the ability to add a recovery email or phone number is ON for most Workspace users and K-12 super admins, but it should be noted that:

Adding email and phone recovery information is OFF by default for K-12 users.
Phone number recovery collection is always enabled for super admins regardless of whether it’s disabled in the admin console.

Any changes admins make to these settings will overrule the existing organizational unit (OU) settings, except for super admins as stated above.

Bảo mật > Phục hồi tài khoản > Thông tin phục hồi — *Security > Account Recovery > Recovery information*

Who’s impacted

Admins and end users

Why it’s important

Adding recovery information to your account is helpful for keeping users’ accounts more secure, recovering users’ accounts as well as evaluating security related events, such as risky logins or re-authentication attempts. However, we know that there are a variety of reasons that customers would want to prevent their users from doing so. For example, turning recovery information off can help customers stay compliant with local privacy regulations, such as GDPR. Or admins can opt to add recovery information themselves.This update gives admins the control to decide which configuration makes the most sense for their users.

Getting started

Admins
- These settings can be configured at the OU and group level in the Admin console at Security > Account Recovery > Recovery information. Visit the Help Center to learn more about allowing your users to add email or phone number recovery information to their account..
- Note that these settings are not applicable if you’re using single sign-on (SSO) with a third-party identity provider or password sync.