Turn on MFA for every app, without slowing anyone down.
My1Login extends passwordless MFA across legacy desktop apps, internal web portals, and modern cloud services without changing user workflows, enabling compliance with procurement guidelines of the MOD, NHS and Central Government.
MFA on every cloud service
Every person must also have their own login.
Every app covered
Would your logins pass?
1. Who do you supply? Choose all that apply.
2. Answer your questions.
Choose who you supply, and your questions will appear here.
My1Login signs your staff in to every app, fills in their passwords and MFA codes, and records who used what.
Customer portal
Enter the 6-digit code from your authenticator app.
Turn on MFA everywhere without changing how people work.
MFA codes are generated and filled for each person
Nobody sees a password
More than 10,000 apps are covered, including desktop and older apps
Leavers lose access to everything
Every sign-in is recorded
There is nothing new to learn
Organisations that use My1Login
London Central & West provides urgent care to more than 4.6 million people. Its clinicians sign in to their computer once, and they can then reach everything they need for patient care.
“Significantly improving security, whilst simplifying the user experience.”Liam Mahon, Director of Digital and Innovation, LCW
ELEXON's first user was up and running in less than an hour. ELEXON says My1Login is “working with 100% of our apps”, including Windows desktop apps that its previous product could not handle.
My1Login found about 600 business apps at Natural Power, and all of them now use single sign-on.
Questions suppliers ask us
Does Cyber Essentials need MFA on every cloud service?
Yes, wherever the service offers it. If a cloud service offers MFA and you have not turned it on, you fail, even if MFA is a paid extra.
Can people share a login?
No. Cyber Essentials says accounts must not be shared, and the NHS toolkit asks for each person to have their own password.
What is DCC Level 0?
DCC stands for Defence Cyber Certification, the MOD's cyber security scheme for its suppliers. Level 0 asks for Cyber Essentials, UK GDPR compliance, and resilient networks and systems. The MOD has asked all its suppliers to reach Level 0, and a certificate lasts three years.
What do NHS suppliers have to show?
If you can reach NHS patient data or systems, you complete the Data Security and Protection Toolkit every year. The 2026-27 toolkit asks you to use MFA on every account that can be reached remotely and on every admin account. Cyber Essentials Plus does not exempt you from the MFA question.
Which government buyers ask for Cyber Essentials?
Central government departments, their agencies and public bodies, and NHS bodies must ask for Cyber Essentials or Cyber Essentials Plus before they award contracts that carry certain risks. The Legal Aid Agency requires criminal legal aid providers to hold Cyber Essentials for the whole contract. G-Cloud 15 requires Cyber Essentials from every supplier, and Cyber Essentials Plus for some lots. Scottish public sector buyers decide contract by contract. A Cyber Essentials certificate must be renewed every 12 months.
Does My1Login hold our passwords?
My1Login stores only encrypted data, and the keys stay inside your own network. This means that even My1Login cannot read your passwords.
How quickly can we start?
Every My1Login product has a 14-day free trial.
What does it cost?
Web single sign-on starts at £1.50 per user per month. Windows desktop single sign-on and MFA cost £2 each per user per month. These prices are for an annual contract for 1,000 users.
Does My1Login certify us?
No. A certification body assesses you. My1Login helps you meet the rules on MFA, separate logins and leavers.