How to Force Reset Google Workspace Users' Passwords with Apps Script

Learn how the Google Workspace admin can change the Google account passwords of multiple users in their organization automatically with Google Apps Script.

You can use Google Apps Script to automatically reset the password of users in your Google Workspace domain. This script can only be executed under the Suite admin account. You also need to enable the AdminDirectory Advanced Service in your Apps Script Editor.

You can force reset passwords of members of a particular group in your organization or specify a list of email addresses and the Google Script will use the AdminDirectory service to change the password of specified users.

const getGroupMembers_ = (groupEmail) => {
  var emails = [];
  var pageToken;
  do {
    const { members = [], nextPageToken } = AdminDirectory.Members.list(groupEmail, {
      maxResults: 200,
      pageToken: pageToken,
    members.forEach((member) => {
      if (member.status === 'ACTIVE') {
    pageToken = nextPageToken;
  } while (pageToken);
  return emails;

const sendEmail_ = (emailAddress, password) => {
    to: emailAddress,
    cc: '',
    subject: `Password changed for ${emailAddress}`,
    body: `The Google Workspace admin has changed your Gmail password to ${password}`,

const changePassword_ = (emailAddress) => {
  const temporaryPassword = Utilities.getUuid();
      password: temporaryPassword,
      changePasswordAtNextLogin: true,
  sendEmail_(emailAddress, temporaryPassword);

const resetUserPasswordsForGroup = () => {
  const groupEmail = '';
  const members = getGroupMembers_(groupEmail);
  members.forEach((member) => changePassword_(member));

const resetGSuitePasswordForUsers = () => {
  const members = ['', '', ''];
  members.forEach((member) => changePassword_(member));

Change GSuite Passwords Periodically

You can create a time-based trigger in Google Scripts to automatically run the reset function at specific intervals (like update password on the first of every month).


The Google Script is written in ES6 with V8 runtime. If V8 is not enabled for your GSuite account, replace the manifest appsscript.json file with this:

  "timeZone": "Asia/Kolkata",
  "dependencies": {
    "enabledAdvancedServices": [
        "userSymbol": "AdminDirectory",
        "serviceId": "admin",
        "version": "directory_v1"
  "exceptionLogging": "STACKDRIVER",
  "runtimeVersion": "V8"

Enable Admin Directory Service

To use the Advanced Directory advanced Google service inside your Google Apps Script project, follow these instructions:

  • Open the Google Script, select the Resources menu and then choose Advanced Google services.
  • In the Advanced Google Service dialog that appears, toggle on/off switch next to the Admin Directory service
  • Click OK to save your changes.
Amit Agarwal

Amit Agarwal

Google Developer Expert, Google Cloud Champion

Amit Agarwal is a Google Developer Expert in Google Workspace and Google Apps Script. He holds an engineering degree in Computer Science (I.I.T.) and is the first professional blogger in India.

Amit has developed several popular Google add-ons including Mail Merge for Gmail and Document Studio. Read more on Lifehacker and YourStory


Awards & Titles

Digital Inspiration has won several awards since it's launch in 2004.

Google Developer Expert

Google Developer Expert

Google awarded us the Google Developer Expert award recogizing our work in Google Workspace.

ProductHunt Golden Kitty

ProductHunt Golden Kitty

Our Gmail tool won the Lifehack of the Year award at ProductHunt Golden Kitty Awards in 2017.

Microsoft MVP Alumni

Microsoft MVP Alumni

Microsoft awarded us the Most Valuable Professional (MVP) title for 5 years in a row.

Google Cloud Champion

Google Cloud Champion

Google awarded us the Champion Innovator title recognizing our technical skill and expertise.

Email Newsletter

Sign up for our email newsletter to stay up to date.

We will never send any spam emails. Promise.