Can one admin back up every mailbox in the domain?
No. Google Workspace Backup Tool signs in one user at a time with that user's app password. It does not use a service account or domain-wide delegation to sweep the whole organisation. For every mailbox without each user present, Google Vault or the admin Data Export is the route.
Why an app password instead of the normal login?
Google switched off basic passwords for third party mail software on managed accounts in 2025. A user who wants a tool to read their mailbox over IMAP generates a 16 character app password under Security, with two-step verification on, and pastes that in place of their login.
Who creates the app password, the admin or the user?
The user. Only the account holder can generate an app password, and only once two-step verification is enabled. An administrator can allow or block app passwords across the domain and can revoke one, but cannot create it for another person.
The sign-in is refused, what is wrong?
Almost always IMAP is off for the user's organisation unit, or the account has no app password because two-step verification is not turned on. Enable IMAP in the Admin console under Apps, Gmail, End User Access, and have the user create the app password. Neither is set in the software.
Does it keep my Gmail labels?
Yes. Gmail stores mail under labels rather than folders, and each label becomes a folder in the saved copy with its name kept. Nested labels keep their structure, and the All Mail view is skipped so a message tagged with several labels is not written more than once.
Will it save Drive files, Chat or Calendar?
No. Google Workspace Backup Tool saves the mailbox. Drive files, Shared drives, Google Chat and Calendar are separate Workspace services with their own stores and are not part of a mail backup.
Can I back up a suspended or ex-employee's mailbox?
Only while it can still sign in. A suspended account usually cannot generate an app password, so back the mailbox up before the person leaves, or before the licence is removed. After the licence is reclaimed the mailbox is gone, and Vault is the only route left if a hold was in place.
PST or PDF for a Workspace backup?
Go with PST if the mail might return to Outlook or another account. Go with PDF for a copy meant for reading, an audit or a legal file that opens anywhere. The run repeats with a different format, so keeping both is common for a compliance copy.
Is there a mailbox size limit?
No. The paid edition sets no ceiling on the amount of mail copied. A large mailbox is slower because Google limits read speed on a single connection, but the run finishes, and it resumes from the last message if the connection drops.
Does Workspace mail pass through Corbett's servers?
No. Google Workspace Backup Tool runs on your machine and connects from there to Google over IMAP. The finished file is written to the drive you name. Corbett stores nothing and relays nothing.
Does Google Workspace Backup Tool run on Mac or Linux?
No. Google Workspace Backup Tool is a Windows application only, from Windows 7 through Windows 11 and Windows Server 2008 through 2025. There is no macOS or Linux build.
What is in the free Workspace backup demo?
It signs a user in with an app password, loads every label and gives the full preview and all the filters. The backup stops at 10 emails from each label, enough to open the output and confirm the labels came across as folders.