The administrator of an AWS account has left the company. How do I access this AWS account?

2 minutos de lectura

I need access to the AWS root user account, but I don’t have the credentials to sign in to the account because of one of the following reasons:

The AWS account root user is no longer the account administrator, and they aren't reachable. I'm unable to reset the password due to an invalid email address.


To access an account as a root user, you must have the email address and password associated with the account.

To access the account as an AWS Identity and Access Management (IAM) user, you must have the user name and password for that IAM user.

If your multi-factor authentication (MFA) device is lost or broken, see How do I remove a lost or broken MFA device from my AWS account?

The simplest way to get the credentials for the account is to ask the former administrator of the account.

If that's not possible, try the following:

  • If the email address is associated with a corporate domain, it's a best practice that you contact your email administrator. Ask your email administrator if they can give you access to the email address, or pass along a password reset email for the account.
    Note: The password reset email is sent from if the account was created before August 28, 2017, or from if the account was created after August 28, 2017.
  • If you have root access to the account but don't know the password for a particular IAM user, sign in as the root user. Then, change the password.

Important: AWS Support can't change the root user or IAM credentials on an account for any reason.

Related information

I can't sign in because my credentials don't work

How do I recover a lost or forgotten AWS password?

How do I change the email address associated with my AWS account?

How do I transfer my AWS account to another person or business?

OFICIAL DE AWSActualizada hace un año
2 comentarios

This is a complete non-answer and belongs nowhere near the question. The main question is:

If someone has complete legitimate control of the corporate e-mail domain, and a working AWS IAM account, how do they determine which of the potentially thousands of historic corporate e-mail addresses that was used for the AWS root account? For example was it,,,,,, etc. etc.

respondido hace 2 meses

Thank you for your comment. We'll review and update the Knowledge Center article as needed.

profile pictureAWS
respondido hace 2 meses