Clever_Pete

@SYNACK and @Uni-Tech sure I'm on [email protected], I'll DM you both

Clever's 2FA can be configured as Badge + PIN, targeted by year group (so it's age-appropriate) or you can setup formal 2FA policies targeting individuals or year groups which also allow for trusted networks, re-authentication frequency etc. Several age-appropriate deviceless options including Picture (cartoon or photo) , PIN, Badge DM for specific config's AD/Entra/365/Google etc. No-cost preview available for POC

Your HT & governors should refer to Keeping Children Safe in Education guidance https://assets.publishing.service.gov.uk/media/68add931969253904d155860/Keeping_children_safe_in_education_from_1_September_2025.pdf ChatGPT summary: Short answer: No — “class logins” (shared accounts) are not compliant. KCSIE (2025) expects schools to run robust online safety, filtering and monitoring, and aligns with DfE cyber security standards to achieve this. Shared logins undermine accountability and monitoring per user. DfE Cyber Security Standards are explicit: “Users must be authenticated with unique credentials before they access devices or services.” This rules out class/shared accounts. For younger pupils or those with SEND/EAL, the DfE suggests alternatives to passwords (e.g., a PIN) or teacher-assisted login that still identifies the individual pupil, rather than a single class login. GOV.UK NCSC guidance also advises unique user accounts for work systems. NCSC What to do instead Use individual pupil accounts and, where needed, age-appropriate sign-in aids (e.g., PINs or teacher-assisted sign-in that preserves per-pupil identification) so your filtering/monitoring and audit remain meaningful.

Set up the SSO into the device (dead easy, takes minutes using a Single Sign On Profile in Workspace)... use your existing supplier or we (Clever) also offer badges, ends up costing approx £300-400 per school per year.

I've had this conversation so many times! Totally get why education org's/enterprises chose to adopt BYOD - to REMOVE barriers to learning - but I can't help but feel that from an org/enterprise perspective the balance has tipped to where BYOD now lacks both security features AND important enterprise deployment functionality. In many cases, there ends up being almost no link btw. IT and Teaching/Learning, not even managed bookmarks, even at the top end simple wins are ignored and students/users are presumed capable of organising themselves... in my experience, you need only sit with almost any student/user to realise this is a very problematic assumption