You Don’t Have Permission to Sign In? Chromebook Fix

“Sorry, you don’t have permission to sign in” means the Chromebook only allows certain Google Accounts, and yours is not one of them. The owner can fix it in Settings, under Privacy and security, in Manage other people. Nothing is wrong with your account or your password.

What this applies to

• Devices: any Chromebook, Chromebox, or Chromebase running ChromeOS.
• Browser: Google Chrome. Not version-specific.
• Account: a personal Google Account, or a work or school account on a managed device.
• Access needed: the Chromebook’s owner, or your administrator on a managed device.

Why does my Chromebook say I don’t have permission to sign in?

This error has nothing to do with your password. The Chromebook blocks the account before it checks your credentials, which is why retyping the password never helps.

There are two causes, and they look identical on the sign-in screen:

• The owner turned on a sign-in list. ChromeOS has a setting called Limit who can sign-in. When it is on, only the accounts on the owner’s list can get in. Everyone else sees this error. This is the common cause on a family or hand-me-down Chromebook.
• The device is managed by a company or school. An administrator can restrict the Chromebook to accounts from their organization. A personal Gmail address will be refused, and no local setting can override it.

How do I tell which cause is mine?

You do not have to guess. There is a one-screen test. Sign in with any account that already works, then:

1. At the bottom right, select the time.
2. Select the Settings gear.
3. In the sidebar, select Privacy and security.
4. Select Manage other people.

Read what the page tells you about the controls:

• You can switch the toggles on and off: you are signed in as the owner. Use the owner fix below.
• It says These settings may only be modified by the owner: this is an owner restriction, but you are not the owner. Find the person who is.
• It says These settings are controlled by enterprise policy: the device is managed. Skip to the work or school fix.

That wording is the whole diagnosis. Two of the three answers mean you need a person, not another button.

One detail that catches people out: this setting sits under Privacy and security, not under Accounts. Most people open Accounts first, find nothing about sign-in permissions, and conclude the setting does not exist.

How do I fix it on a personal or family Chromebook?

The owner has to do this. The owner is the account that signed in first when the Chromebook was set up, or first after its last factory reset.

1. Sign out of the Chromebook.
2. Sign in with the owner account.
3. At the bottom right, select the time, then the Settings gear.
4. Select Privacy and security, then Manage other people.
5. Look at Limit who can sign-in. If it is on, a list of the Google Accounts on this Chromebook appears below it.
6. Add the blocked account to that list. To let anyone sign in instead, turn Limit who can sign-in off.
7. Sign out, then sign in with the account that was blocked.

Turning the setting off lets any Google Account sign in and create a profile. On a shared device, adding the one account is safer.

What if nobody knows who the owner is?

Sign in with each account that works and run the test above. The account that can flip the toggles is the owner. If no account can, the owner account is gone, and only a factory reset reassigns it. Read the FAQ warning first.

How do I fix it on a work or school Chromebook?

You cannot, and that is the point of the policy. The restriction comes from your organization’s admin console, and the local Settings controls are locked out.

• If you are a student or employee: contact your IT administrator and ask which accounts the device accepts. Usually it is only your organization-issued account.
• If you bought this Chromebook secondhand: it is still enrolled with its previous owner’s organization, and only that organization can release it by deprovisioning the device. Resetting it usually changes nothing, because administrators can switch on a setting that makes a wiped Chromebook enroll itself straight back into the same organization during setup.

Can I get online right now without fixing this?

Often yes. On the sign-in screen, select Browse as Guest at the bottom. You get a working browser with no sign-in. Nothing is saved, and when you select the time and then Exit guest, your files, cookies, and browsing activity are deleted.

If Browse as Guest is not on the screen, it has been turned off. It lives on the same Manage other people page as the sign-in list, so an owner who locked down sign-in has often switched off Guest browsing at the same time. On a managed device, only the administrator can turn it back on.

What does not fix this

These are the things people try first, and none of them touch the cause.

• Resetting or changing your Google Account password. The Chromebook rejects the account before it looks at a password, so a brand new password gets the same error.
• Retyping the password slowly, or using a different keyboard layout. Same reason. This error is not a wrong-password error.
• Switching to another Wi-Fi network or a phone hotspot. That fixes a different Chromebook error, the one that says your username or password cannot be verified on this current network. This one is a local permission list, not a connection problem.
• Using Add Person on the sign-in screen. Adding the account is exactly what the list is blocking. The refusal happens at the same point either way.
• Removing and re-adding the account. The list is stored by the owner’s settings, not by the account profile, so removing a profile does not clear it.
• Powerwashing the Chromebook. This does clear the list by erasing everything on the device. It also hands ownership to whichever account signs in first afterward, which may not be the one you wanted. It is a destructive way to change one toggle, and on a managed device it does not work at all.

Frequently asked questions

Will a factory reset let me sign in?

Warning: a factory reset, also called a Powerwash, cannot be undone. Back up anything you care about before you start, and do not use it just to change one setting.

On a personal Chromebook, yes. A factory reset erases all user data on the device, including everything in the Downloads folder. Files in Google Drive and on external storage are safe. The account you sign in with after the reset becomes the new owner account. On a managed work or school Chromebook, a reset usually does not help, because the device can be set to re-enroll itself into the same organization as soon as it is wiped.

Is my Google Account locked or banned?

No. This error comes from the Chromebook, not from Google. Sign in to the same account on a phone or any other computer, and it will work normally. A disabled account shows a different message saying your account may have been deleted or disabled.

Why can my family member sign in but I can’t?

Because their account is on the owner’s sign-in list and yours is not. That is the entire difference. The owner adds yours in Manage other people, and you are in.

Does the sign-in screen have an account limit?

The sign-in screen shows up to 19 accounts, but that limit produces no error message. If you are seeing this error, you have hit a permission list, not a count.

In short

This error is a door with a guest list, not a broken lock. Someone decided which accounts may sign in to that Chromebook, and your name is not written down. The owner adds it in Manage other people, or an administrator does it from the admin console, and the error disappears on the next sign-in attempt.

Related reading

• Chromebook Says Password Cannot Be Verified? Fix It
• How to Add or Remove Users on a Chromebook
• How to Change the Primary Account on a Chromebook
• How to Reset Your Google Account Password on Any Device