How to Secure Google Workspace in Under 5 Minutes

That stomach-drop feeling when an employee calls to say they’ve left their phone with their company log-in in a taxi or lost their personal laptop at a café is every business owner’s nightmare.

But there is no need to panic—you don’t need an IT degree to lock things down.

This quick guide walks you through securing your Google Workspace account, remotely wiping corporate data, and checking if any files were compromised—all in less than five minutes.

The “So What?”

Taking five minutes to follow these steps saves you hours of stress, eliminates the risk of costly data privacy breaches, and stops sensitive business data from walking out the door. You get instant peace of mind knowing your client files are safe, your business is protected, and your employee can get back to work on a new device without missing a beat.

Step 1: Remotely Wipe Corporate Data (Mobile Devices)

If the missing device is a smartphone, you can wipe your company data immediately without touching the employee’s personal photos or personal files.

• Open your browser and head to admin.google.com.
• From the left sidebar, navigate to Devices > Mobile and endpoints > Devices.
• Click Add a filter, select Email, enter the employee’s email address, and click Apply.
• Check the box next to the missing phone’s details.
• Click Wipe Account, then click Wipe Account again to confirm.

WARNING: Do not select WIPE DEVICE, this will delete everything from that phone, including the employee’s personal information

Step 2: Lock Down Account Security & Active Sessions

Whether it’s a mobile phone or a personal laptop, you need to revoke active access and change login details immediately.

• In the Admin Console sidebar, go to Directory > Users and click on the employee’s name.
• Select the Security tab and expand Recovery information. Delete any listed recovery email or phone number unless you can independently verify it belongs to them.
• Scroll down, expand Sign-in cookies, and click Reset. This revokes all active sessions, forcing anyone using the lost device to sign in again.
• Scroll back up, expand 2-step verification, and click Get backup verification codes.
• Under the employee’s profile name, click Reset password, then click Reset to issue a new one.

Crucial Warning: Deliver the new password and backup codes over the phone or in person. Do not text them. If the lost device is a mobile phone, a text message with new credentials could pop up right on the lock screen for anyone to see.

Step 3: Audit Recent File Downloads

Before wrapping up, check whether any sensitive company files were downloaded before access was cut off.

• From the sidebar, go to Reporting > Audit and investigation > Drive log events.
• Adjust the date range to cover the timeframe around when the device went missing.
• Set the Actor filter to the employee’s name.
• Set the Event name to Download and click Search.

---