First, work out which of two situations you are in
Everything below hinges on one question: does anyone at your company still control the email address the departed admin used to sign in to Zoho?
Work through this in order:
- Find the sign-in address. Check old Zoho invoices, the original welcome emails or whoever handled the renewal last year. Brace yourself: it’s sometimes a personal Gmail address, which makes everything harder.
- Check whether you control that mailbox. If it is on your own domain (jane@yourcompany.com), you do, even if the mailbox was suspended when she left. Your email administrator can switch it back on. If it’s a personal address, you almost certainly don’t control it.
- Check for other admins. Ask around before assuming the worst. Any other user with admin rights can do most of this recovery without involving Zoho support at all.
If you control the mailbox, you can fix this yourself in roughly twenty minutes. If you don’t, you’re looking at several days of verification with Zoho. Both routes are below.
Can you still access their mailbox? Do this first
Zoho treats whoever controls the sign-in email as the account holder. So the clean fix is to take over the departed admin’s Zoho account temporarily, then hand super admin to someone who still works for you.
- Reactivate the mailbox if it was suspended. In Google Workspace that is Admin console > Directory > Users. In Microsoft 365 it is Admin center > Users > Active users. Zoho Mail has its own console at mailadmin.zoho.com.
- Go to accounts.zoho.com, click Forgot Password and enter the departed admin’s address. The reset link arrives in the mailbox you now control.
- Set a new password and sign in. If multi-factor authentication blocks you, look for an alternative verification option on the MFA screen. No backup codes and no recovery phone? You’ll need Zoho’s MFA reset process, which is a smaller version of the verification described in the next section.
- Transfer super admin. In Zoho One: one.zoho.com > Admin Panel > Users, open the new owner’s record and use Change Super Admin. In standalone Zoho CRM: Setup > Users and Control > Users, then the same option against the user. Zoho emails the new owner a confirmation; once they accept, the transfer completes.
One firm warning. Do not delete the old user account once you’re in. Workflow rules, scheduled functions, record ownership and integration connections tied to that user can break or vanish when the user is removed. Deactivate instead, audit what they owned and remove them later. If someone has already deleted things in a panic, read our guide to recovering deleted Zoho CRM records before doing anything else.
What if the mailbox is gone for good?
Then you need Zoho support to transfer the account, which means proving to Zoho that the business owns it. Raise the request from a company email address on the same domain as the Zoho organisation, ideally from a director.
Have this evidence ready:
- Domain ownership. Zoho will normally ask you to publish a TXT record on the domain attached to the account. Something like:
yourcompany.com. 3600 IN TXT "zoho-verification=zb10203040.zmverify.zoho.com"- Billing evidence. Recent invoice numbers and the last four digits of the payment card. The billing address on the account helps too.
- Authority. Written confirmation that the admin has left and that you are entitled to act for the business.
Be realistic about timescales. Zoho support is methodical here, because this same process is what stops a disgruntled leaver hijacking a company account. Two to five working days is typical in our experience. It stretches further when the account was registered with a personal email and paid on a personal card, since the paper trail linking the business to the account is thin.
That thin-trail case is the point where most people should stop and get help. To be clear about what help can actually do: nobody can skip Zoho’s verification, including us. What an experienced developer can do is keep the business running while verification grinds through, by exporting data through other users’ access and rebuilding critical automations under an account you do control. If revenue depends on the system, our emergency Zoho developer service gets a senior developer responding within 30 minutes during UK business hours.
How do you secure billing before the renewal hits?
Once you hold super admin, sort the money out before anything else. A failed renewal downgrades the subscription, in most cases to the free edition. Paid features vanish and any automation that relied on them stops working.
In Zoho One, go to one.zoho.com > Admin Panel > Billing. For standalone apps, subscriptions live at store.zoho.com under your account.
Check the renewal date first. Then look at the payment method: if it’s the departed admin’s personal card, replace it today. Finally, change the invoice recipient to a shared mailbox such as accounts@yourcompany.com. Sending invoices to one person’s mailbox is part of how you ended up here.
What should the new super admin audit?
Treat the handover as a security incident, even when the leaver was entirely friendly. The point is simply to establish what the company owns.
Users. Admin Panel > Users in Zoho One, or Setup > Users and Control > Users in CRM. Deactivate anyone who has left. Check which profiles carry admin rights and whether each one still needs them.
Sessions and app passwords. At accounts.zoho.com > Security, close the former admin’s active sessions and revoke their app passwords. Mobile apps stay signed in for a long time, so their phone may well still have live access to your CRM.
API tokens and OAuth clients. Open api-console.zoho.com while signed in as the old account, before you deactivate it. Every OAuth client created under that user is listed there. Each one is an integration that will fail when the user goes. In CRM, also check Setup > Developer Space > Connections. Tokens authorised under a personal user die when that user is deactivated, so the Zapier feed or the website form starts returning 401 errors. Get each connection re-authorised under a service account first.
Workflows and functions. Setup > Automation > Workflow Rules, then Setup > Developer Space > Functions. Look for rules that notify the departed admin and functions that run on their authorisation. Pay particular attention to code nobody else has ever read. Undocumented Deluge written by a leaver is the most common time bomb we find in inherited systems.
If this audit turns up a system nobody left at the company understands, that deserves a serious conversation. Our piece on whether you should hire a Zoho consultant covers how to judge it.
Quick diagnostic checklist
- Sign-in email address of the super admin identified
- Mailbox access confirmed, or recovery case opened with Zoho support
- Super admin transferred to a current employee
- Former admin deactivated, not deleted
- Payment card replaced and invoice email moved to a shared mailbox
- Renewal date checked
- Active sessions closed and app passwords revoked
- OAuth clients and connections re-authorised under a service account
- Workflow rules and custom functions reviewed for dependencies on the leaver
How do you stop this happening again?
Create a break-glass admin now, while the pain is fresh. Set up a user on a shared service address (zoho-admin@yourcompany.com) with super admin or full admin rights. Put the password and the MFA backup codes in your company password manager. IT should control the mailbox behind it.
Then write the one page of documentation that didn’t exist this time: which address holds super admin, where the credentials live, the renewal date, what each integration connects to and who built each customisation. It’s perhaps thirty minutes of typing and it would have saved you this entire week.
Finally, add a line to your leaver checklist: transfer Zoho ownership before the last day. Most offboarding processes cover laptops and door passes but forget SaaS ownership.
When it is worth getting help
If you’re reading this with a renewal due on Friday and no access, don’t spend three days experimenting. Our Zoho support service handles exactly this kind of inherited mess: plenty of the systems we take on arrived mid-crisis. Prices are on our pricing page and a discovery consultation is free. Get in touch and a developer is assigned within 24 hours for standard work; genuine emergencies get the 30-minute response. If you need someone to own the system properly afterwards, you can hire a Zoho developer on a retainer or dedicated basis.