Sign a user out of a managed Google Account

To sign out of your Google Account on your own device, go here instead.

As an administrator, you can sign a user out of a managed Google Account, such as Google Workspace or Cloud Identity. You might want to sign them out if you don't recognize a device that’s listed in your Google Admin console, you’re suspending or removing a user, a device is lost or stolen, or you’re resetting a user's password.

Sign a user out of mobile devices & browsers

You can reset a user's sign-in cookies to sign them out of mobile devices and browsers. Suspending a user automatically resets their sign-in cookies. Resetting a user's sign-in cookies does not sign them out of apps, such as Gmail and Google Drive for desktop.

To reset a user's sign-in cookies:

To complete these steps, you need the appropriate User management privilege. Without this privilege, you won't see all the controls needed to complete these steps.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DirectoryUsers.
3. In the Users list, find the user. If you need help, go to Find a user account.
4. Click the user's name to open the user's account page.
5. Click SecuritySign-in cookiesReset.
6. (Optional) To return to the user’s account page, at the top, click the Up arrow .
7. (Optional) To wipe a mobile device’s data, go to Wipe data from a device (below on this page).

Sign a user out from computers & smart home devices

Supported for computers managed by Fundamental management or standalone Google Credential Provider for Windows (GCPW) and Assistant-enabled smart home devices, such as Google Nest smart displays and speakers.

To remove yourself or other members from a home, go to Remove Google Nest devices from the Google Home app.

Use this method when you want to require a fresh sign-in on a specific computer or smart home device.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. Go to Menu  DevicesOverview.
3. Click Endpoints.
4. Select the devices that you want to sign users out from.
5. At the top, click More Sign Out User.
6. Click Sign Out User to confirm.

Wipe data from a mobile device

If you use Google endpoint management, you can wipe data from a mobile device. You might want to wipe data if sensitive data is on a lost or stolen device or a user leaves your organization. In many cases, you can remotely remove data from the device. However, the user can still access their Google data through web apps and other authorized mobile devices. For details, go to Wipe corporate data from a device.

Additional account security step: Revoke authorized access

You can revoke third-party app access to a user's managed Google Account so apps can’t access the user’s data anymore. For example, a user might install a diagramming app that needs access to their Google Drive files so it can create diagrams or flowcharts. When the app is installed, it asks the user to grant access to the data for their Google service. You can make sure these apps can no longer access the user’s data. For instructions, go to Manage a user's security settings.

Related topics

• Reset a user's password