# Credential Auto-Deactivate

Credential Auto-Deactivate automatically deactivates user credentials that have not been used for a certain period of time. When enabled, this feature affects all users within an organization except for those in specified exempt groups.

{% hint style="warning" %}
Credential Auto-Deactivate only works for physical credentials like cards and fobs. It does not work for mobile credentials like Mobile NFC or Mobile BLE.
{% endhint %}

## Set up

{% hint style="danger" %}
You must be an Access System Admin to turn on Credential Auto-Deactivate. Learn more about [Roles and Permissions for Access Control](https://help.verkada.com/access-control/roles-and-permissions-for-access-control).
{% endhint %}

{% stepper %}
{% step %}

#### In Verkada Command, go to **All Products** > **Access** .

{% endstep %}

{% step %}

#### On the left navigation, click **Access** **Settings**.

{% endstep %}

{% step %}

#### Toggle on **Auto-Deactivate Credentials**.

a. For **Time period,** set the timeframe (7 - 365 days) to wait before a credential is automatically deactivated if unused.\
b. For **Exempt Groups,** Click **Manage Groups** to select groups that should never have their credentials automatically deactivated.

<div align="left" data-with-frame="true"><img src="https://134288481-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FaaHs5RfKqv9Z49mi02cC%2Fuploads%2Fgit-blob-36e2f2cf3038e39a0bfc9a6df01157dd80b13063%2F629b044244f0a269d7e725255bad8e83d8c43107.png?alt=media" alt="" width="603"></div>
{% endstep %}
{% endstepper %}

## Alerts

You can configure the following alerts for Credential Auto-Deactivate in the [Command alert inbox](https://app.gitbook.com/s/ylYKicREo6JpuOJH4teK/events-and-alerts/create-alerts-across-verkada-products):

{% stepper %}
{% step %}

#### **Credential Auto-Deactivated:** Alerts you when user credentials have been automatically deactivated.

{% endstep %}

{% step %}

#### **Deactivated Credential Used:** Alerts you when someone attempts to use a deactivated credential at one of your doors.

{% endstep %}
{% endstepper %}

![](https://134288481-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FaaHs5RfKqv9Z49mi02cC%2Fuploads%2Fgit-blob-6d9607136ed535fc411e8213d39216ad38c2d6dd%2Fd80bc65ca20d2b4f4c38780f1d41a8352063a746.png?alt=media) ![](https://134288481-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FaaHs5RfKqv9Z49mi02cC%2Fuploads%2Fgit-blob-88ac9f8165b35f58cda8ac53574db164414896db%2F15b9aa9fa0ebd447dfcf280fd0b382c27aacf47c.png?alt=media)

## Credential status

On an access user profile under **Credentials**, you can see the status of their keycard(s) and when a credential was last used. You can change the status of a credential from the **Status** drop-down.

![](https://134288481-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FaaHs5RfKqv9Z49mi02cC%2Fuploads%2Fgit-blob-8944cab8dfaa33baaabd6bf3a588d2d065567d3e%2F22a62e90703aaa5a42cb945d70cfdf7140740294.png?alt=media)

{% hint style="warning" %}
You can also see credential status information in a [Credential CSV Export](https://help.verkada.com/access-control/configuration-and-setup/import-and-export-credentials-with-csv-files). For best results, filter by the **Credential Status, Last Used, or Auto Deactivated** fields.
{% endhint %}

***

**Need more help?** Contact [Verkada Support](https://www.verkada.com/contact/).
