Manage passkeys

On the Passkeys page, you can select the Fleet Overview tab to quickly view a summary of all active credentials or passkeys in your fleet. From the All Passkeys tab, you can revoke one or more passkeys from a single place. 

Fleet Overview tab

Click Passkeys in the left nav bar and select the Fleet Overview tab. 

Total passkeys

This widget provides a count of the number of passkeys belonging to users with an Active status since the tenant was created.

Vulnerable passkeys

A vulnerable passkey is any device that is either jailbroken/rooted, has a disabled firewall, does not have a passcode or biometric set, or does not have a TPM. If a device has one of these issues, it is considered vulnerable. Note that a passkey may be counted more than once in this widget -- for example, if a biometric is not enrolled and the firewall is disabled, the same device would be counted under both categories in the widget. 

Also, note that older Windows devices (TPM <2.0) that do not support Windows Hello will automatically be listed under Biometric not enrolled. 

You can click a category, such as Jailbroken/Rooted, to view the passkeys associated with that potential vulnerability, select the ones you want to revoke, and then click Revoke passkey(s).

Activity in the last 30 days

This widget shows the history of all passkeys' statuses (regardless of user status) as a series of daily snapshots, with a view into the snapshots taken over the last 30 days.

Beyond Identity authenticator app versions

This widget displays the percentage of passkeys broken out by each authenticator version. 

Passkeys by platform & OS

This widget helps you identify the number and percentage of passkeys based on the platform and operating system version they're on. 

All Passkeys tab

Under the All Passkeys tab, you can filter entries, view events that match your filter, or select the checkbox beside passkey(s) and revoke that passkey to remove all access.