Deviceless MFA for Microsoft 365

MFA that works in a phone-free school

Microsoft asks for a second factor. Your staff and pupils scan a Magic Badge instead of hunting for a code.

Book a demo
Explore MyLogin

No app to install

No device to issue

Entra stays in control

Why now?

MFA is no longer optional for schools, and most staff and pupils do not have a phone to hand during the day. Microsoft, Cyber Essentials and the new Children’s Wellbeing and Schools Act all point the same way: sign-in security that does not depend on a personal phone.

73

%

of secondary schools were breached or attacked in the past year, up from 60 percent.

96

%

of them were hit by phishing, the attack MFA is built to survive.

99

%

is the reduction in account compromise risk Microsoft attributes to MFA.

Sources: DSIT Cyber Security Breaches Survey 2025/2026. Microsoft Entra, March 2026.

Most MFA assumes a phone in every pocket

That assumption was always shaky in a school. In 2026, it stopped being true at all.

All schools should be mobile phone-free environments by default; anything other than this should be by exception only.

Department for Education guidance, now statutory

The authenticator app is in a locker

A phone-free policy and a phone-based second factor cannot both be enforced. One of them gives way.

Staff will not use a personal phone for work

Schools rarely issue phones, and hardware tokens are one more thing to buy, issue and replace.

Shared devices and a 30-pupil queue

A code-based prompt on a trolley laptop turns the first 10 minutes of a lesson into an IT support session.

What it feels like to use

One credential, and about two seconds.

Signing in

Sign in to Microsoft as normal, hold up the badge, carry on. Nothing to install, nothing to charge, nothing to remember.

In the classroom

A teacher can get a whole class on to shared devices without the lesson turning into a support queue.

When a Magic Badge goes missing

A teacher prints a replacement in a minute. No ticket, no locked-out pupil, no call to the help desk.

How it works

MyLogin is an external MFA method in Microsoft Entra ID. Microsoft stays in charge of who gets in.

Sign in as normal

A user opens Microsoft 365 and enters their usual school account.

Entra asks for a second factor

Your Conditional Access policy runs exactly as it does today, then hands the challenge to MyLogin.

Scan the badge

The result goes back to Microsoft, which grants access.

What stays with Microsoft?
  • Policy evaluation and Conditional Access, on every sign-in
  • The final access decision, every time
  • Your users, groups and licences. No password ever leaves Microsoft.

Read the technical detail

Getting started

Setup takes three steps, and your MyLogin admin can handle almost all of it. Most schools are done in an afternoon.

Set up MyLogin and print Magic Badges
Connect MyLogin to Microsoft Entra

Your IT lead does this bit.

Turn it on for a pilot group, then roll out

Full setup guide for your IT team

Talk to support
Windows devices too

MyLogin can be the second factor at the Windows 11 login screen itself, through Web Sign-In.

Set up Web Sign-In

Questions we get asked

If yours is not here, our support team answers this sort of thing all day.

No. That is the point of it. The second factor is something they already carry as part of the school day. There is nothing to install and nothing to charge.

A MyLogin teacher account can print a replacement. It takes a minute and does not need a ticket.

Not on this route. Microsoft stays your identity provider and MyLogin adds a second factor on top, which is what most schools want. There is a separate route where MyLogin replaces Microsoft as the identity provider, if you want app sign-in as well as MFA.

Yes, on Windows 11, through Web Sign-In.

Yes. External MFA reached general availability in Microsoft Entra ID in March 2026, and it is the supported replacement for Custom Controls.

Independently certified

Meet the MFA requirement without adding to anyone’s workload

See MyLogin working against a Microsoft tenant, in about twenty minutes.

Book a demo
Explore MyLogin

Trusted by more than 30,000 schools through Wonde