Chromebook logins in Primary

[Jobos]

I'm looking at how we can shorten logging on to chromebooks as it a primary and year 1 are having problems typing their username never mind their password. I have enabled autocomplete domain and shortened their username but year 1 takes ages finding the right keys. 

 

We are using GSuite and MyLogon so once logged in to the chromebook they can use MyLogin and have the option to either use emojis or scan a magic badge so really it's just the initial logging on to the chromebook I need to make easier.

 

Any ideas?

 

 

 

 

[Primus]

Doesn't MyLogin do QR code badges for sign in?

 

We use Clever badges for this.

[Clever_Pete]

Set up the SSO into the device (dead easy, takes minutes using a Single Sign On Profile in Workspace)... use your existing supplier or we (Clever) also offer badges, ends up costing approx £300-400 per school per year. 

[TheHyperTechie]

MyLogin badges all the way! 

 

Used them for years here on our chromebooks. Don't think we could ever go back to manual logins. They just scan a badge into the webcam and are loaded into their app dashboard within seconds.

[Jobos]

25 minutes ago, HyperTech said:

MyLogin badges all the way! 

 

Used them for years here on our chromebooks. Don't think we could ever go back to manual logins. They just scan a badge into the webcam and are loaded into their app dashboard within seconds.

 

So MyLogin can be used to bypass the chromebook logon just by scanning the badge? That would make things a lot easier.

[TechieJI]

We are using MyLogin "Magic Badges" - QR Codes for pupils to log into the Chromebooks, would highly recommend.

 

2 form Primary School.

Edited September 11, 2025 by TechieJI

[TheHyperTechie]

37 minutes ago, Jobos said:

 

So MyLogin can be used to bypass the chromebook logon just by scanning the badge? That would make things a lot easier.

Correct, they have multiple sign in methods available (QR codes, Emoji passwords).

[Jobos]

After paying MyLogin for the extra service is it easy to add this to GSuite or do I need a third party?

[TheHyperTechie]

Just now, Jobos said:

After paying MyLogin for the extra service is it easy to add this to GSuite or do I need a third party?

Speak to Getech, they can do it for you, or you can do it yourself. Setup isn't overly difficult, it essentially just involves setting MyLogin as your IdP. Definitely worth it though! 

[TwistedHelixis]

The year 1 teacher at one of my primary school refused to use badges or bar codes about 5 years ago. He said its part of their job to make sure that pupils know how to log in using usernames and passwords, so they spend the first few weeks in September going over ond over just this one thing, until all the pupils know how to do this. Apparently by October, the kids not only know how to log in, but can now spell their first and last names, as no name shorting was also request. TBH, when I was asked to set them up like this I was very skeptical, but it does work.

 

I mentioned this to a few of my other primary schools and I now have 4 school doing it like this. Also saves one of the other teachers later on from having to teach them. Not had any schools asking to go back to how it was done previously.

 

EDITED to make sense

Edited September 11, 2025 by TwistedHelixis

[Primus]

11 minutes ago, TwistedHelixis said:

The year 1 teacher at one of my primary school refused to use badges or bar codes about 5 years ago. He said its part of their job to make sure that pupils know how to log in using usernames and passwords, so they spend the first few weeks in September going over ond over just this one thing, until all the pupils know how to do this. Apparently by October, the kids not only know how to log in, but can now spell their first and last names, as no name shorting was also request. TBH, when I was asked to set them up like this I was very skeptical, but it does work.

 

I mentioned this to a few of my other primary schools and I now have 4 school doing it like this. Also saves one of the other teachers later on from having to teach them. Not had any schools asking to go back to how it was done previously.

 

EDITED to make sense

It's not just spelling their name it's the strength of the associated password. Being able to log on with a username and password is definitely something most students should be able to do by the end of the primary phase but that doesn't mean there isn't a place for QR code sign ins at the younger ages within the phase.

[TwistedHelixis]

1 minute ago, Primus said:

It's not just spelling their name it's the strength of the associated password. Being able to log on with a username and password is definitely something most students should be able to do by the end of the primary phase but that doesn't mean there isn't a place for QR code sign ins at the younger ages within the phase.

The year 1 teacher at my school would very much disagree. I remember him saying previously, one of the most important things he can teach his pupils in year 1 IT, is a basic understanding of the importance of usernames / passwords and being able to use this skill in the following years.

 

Previously, I would have totally agreed with you, but I have seen first hand over multiple years that they can all learn how to login in very little time. He does say it drives him mad and his hair fulls out each September, but he says the effort is really worth it.

 

 

[Primus]

1 minute ago, TwistedHelixis said:

The year 1 teacher at my school would very much disagree. I remember him saying previously, one of the most important things he can teach his pupils in year 1 IT, is a basic understanding of the importance of usernames / passwords and being able to use this skill in the following years.

 

Previously, I would have totally agreed with you, but I have seen first hand over multiple years that they can all learn how to login in very little time. He does say it drives him mad and his hair fulls out each September, but he says the effort is really worth it.

 

 

Secure passwords are a significant barrier to this for younger students. 

[willtech]

5 hours ago, Jobos said:

 

So MyLogin can be used to bypass the chromebook logon just by scanning the badge? That would make things a lot easier.

The instructions are here if you need them: https://mylogin.zendesk.com/hc/en-gb/articles/13860067748509-Setting-up-MyLogin-as-the-identity-provider-for-Chrome-OS-devices-Google-Workspace#:~:text=Set up your Google Workspace tenant for signing into Chromebooks using your MyLogin credentials

[Jobos]

Thanks for all the replies. Wonde took a while to send the price which was £299 for the first year but the HT wants to make a really easy class logon so will have to hold on with the badges until they have tried it. Shame as I was getting excited at the thought of signing in by scanning a QR code. 

[Clever_Pete]

31 minutes ago, Jobos said:

Thanks for all the replies. Wonde took a while to send the price which was £299 for the first year but the HT wants to make a really easy class logon so will have to hold on with the badges until they have tried it. Shame as I was getting excited at the thought of signing in by scanning a QR code. 

Your HT & governors should refer to Keeping Children Safe in Education guidance https://assets.publishing.service.gov.uk/media/68add931969253904d155860/Keeping_children_safe_in_education_from_1_September_2025.pdf 

 

ChatGPT summary:

 

Short answer: No — “class logins” (shared accounts) are not compliant.

• KCSIE (2025) expects schools to run robust online safety, filtering and monitoring, and aligns with DfE cyber security standards to achieve this. Shared logins undermine accountability and monitoring per user. 

• DfE Cyber Security Standards are explicit: “Users must be authenticated with unique credentials before they access devices or services.” This rules out class/shared accounts. For younger pupils or those with SEND/EAL, the DfE suggests alternatives to passwords (e.g., a PIN) or teacher-assisted login that still identifies the individual pupil, rather than a single class login. GOV.UK

• NCSC guidance also advises unique user accounts for work systems. NCSC

What to do instead

Use individual pupil accounts and, where needed, age-appropriate sign-in aids (e.g., PINs or teacher-assisted sign-in that preserves per-pupil identification) so your filtering/monitoring and audit remain meaningful.

 

[Jobos]

@CleverInt yes I know what you mean and I was all in favour of having the QR badges but the HT dismissed it when the price was brought up which I didn’t think was that bad. 

[TheHyperTechie]

On 12/09/2025 at 17:11, Jobos said:

@CleverInt yes I know what you mean and I was all in favour of having the QR badges but the HT dismissed it when the price was brought up which I didn’t think was that bad. 

Ask Wonde for a demo, I’m sure they can make this happen. Then ask your teachers for feedback. I’m confident they’ll be amazed at the amount of time it saves. After that, share the feedback with the HT. As someone else mentioned, a single class login is completely against KCSIE standards and should be avoided.

[CTIDTech]

Do any of these options also offer MFA or 2FA for students?  What's to stop someone using someone else's card/badge?  If so is this an extra cost?

[TheHyperTechie]

9 hours ago, CTIDTech said:

Do any of these options also offer MFA or 2FA for students?  What's to stop someone using someone else's card/badge?  If so is this an extra cost?

They do offer 2FA, it means the student has to sign in with their Wonde password, and magic badge.

[Clever_Pete]

Clever's 2FA can be configured as Badge + PIN, targeted by year group (so it's age-appropriate) or you can setup formal 2FA policies targeting individuals or year groups which also allow for trusted networks, re-authentication frequency etc. 

 

Several age-appropriate deviceless options including Picture (cartoon or photo) , PIN, Badge

 

DM for specific config's AD/Entra/365/Google etc. 

 

No-cost preview available for POC

[thimon]

I’ve looked at setting this up for Windows devices. However they need to be fully InTune joined, can’t even be hybrid joined, we’re sadly not there yet. Also currently disables local admin logins https://mylogin.zendesk.com/hc/en-gb/articles/24954119552797-Pre-requisites-for-setting-up-MyLogin-as-the-Identity-Provider-for-Microsoft-365-Windows

Edited January 6 by thimon