This article explains how to use the Passkeys page in the Beyond Identity Admin Console to view fleet-wide credential summaries, monitor vulnerabilities, track activity, and revoke passkeys when needed.
On the Passkeys page, you can select the Fleet Overview tab to quickly view a summary of all active credentials or passkeys in your fleet. From the All Passkeys tab, you can revoke one or more passkeys from a single place.
Fleet Overview tab
Click Passkeys in the left nav bar and select the Fleet Overview tab.
Total passkeys
This widget provides a count of the number of passkeys belonging to users with an Active status since the tenant was created.
Vulnerable passkeys
A vulnerable passkey is any device that is either jailbroken/rooted, has a disabled firewall, does not have a passcode or biometric set, or does not have a TPM. If a device has one of these issues, it is considered vulnerable. Note that a passkey may be counted more than once in this widget -- for example, if a biometric is not enrolled and the firewall is disabled, the same device would be counted under both categories in the widget.
Also, note that older Windows devices (TPM <2.0) that do not support Windows Hello will automatically be listed under Biometric not enrolled.
You can click a category, such as Jailbroken/Rooted, to view the passkeys associated with that potential vulnerability, select the ones you want to revoke, and then click Revoke passkey(s).
Activity in the last 30 days
This widget shows the history of all passkeys' statuses (regardless of user status) as a series of daily snapshots, with a view into the snapshots taken over the last 30 days.
Beyond Identity authenticator app versions
This widget displays the percentage of passkeys broken out by each authenticator version.
Passkeys by platform & OS
This widget helps you identify the number and percentage of passkeys based on the platform and operating system version they're on.
All Passkeys tab
Under the All Passkeys tab, you can filter entries, view events that match your filter, or select the checkbox beside passkey(s) and revoke that passkey to remove all access.