Fast MFA for hospitals: strong login in seconds
The fastest MFA for hospitals is the one the clinician doesn't have to repeat. With the Crayonic Badge, a clinician verifies once at the start of a shift with a PIN or fingerprint on the Badge. After that, each workstation signs them in as they approach and locks as they leave. Nothing to type, tap or approve on a phone.
Book a Demo
What slow login costs
105 seconds to 10
Alder Hey Children’s Hospital cut login time from 1 minute 45 seconds to 10 seconds. With almost 5,000 logins a day, that saved over 130 staff hours.
60.5% faster desktop login
Measured by stopwatch at 55 UK and Irish hospitals after single sign-on (October 2025). The authors are linked to an SSO vendor, so read the totals as an upper estimate.
About 30 hours a year
Lost to login friction per frontline worker. See the calculation.
Workarounds follow
Passwords taped to screens, cups over proximity sensors, sessions handed to the next colleague (Koppel et al., 2015).
Where the seconds go, and how the Badge removes them
| Login step | Typical ward login | Crayonic Badge |
|---|---|---|
| Identify | Type a username or tap a card | Presence of the Badge near the workstation |
| Second factor | Password, phone push or code, at every login | PIN or fingerprint on the Badge, once per shift |
| Switch user | Log out, then log in again | One clinician walks away (locks), the next walks up |
| Lock when leaving | Timeout, often extended or defeated | Automatic on walk-away |
| With gloves or a mask | Fingerprint and face checks often fail | Nothing to touch |
Fast without giving up security
Phishing-resistant
FIDO2 credentials in an EAL5+ secure element, bound to the real site, with nothing a fake page can reuse. Why that matters.
Still the same person
On-body detection and continuous motion monitoring keep confirming the wearer. If the Badge comes off, it locks and asks for a fingerprint or PIN.
NFC fallback
Where only an NFC reader is installed, a tap works like a smart card.
How to measure it in your pilot
Count logins per clinician per shift and seconds per login, before and after. Track lock-on-leave events and how often break-glass access is used. Crayonic Device Manager logs each sign-in for your audit trail and SIEM.
How does this compare to Imprivata? See Crayonic vs Imprivata.
Frequently asked questions
How fast is login with the Crayonic Badge?
After the once-per-shift unlock, the clinician is signed in as they reach the workstation. There is no step left to time.
Is fast MFA still phishing-resistant?
Yes. The speed comes from removing repeated steps, not from weaker factors. Every sign-in is still a FIDO2 cryptographic check.
What happens when a clinician walks away?
The workstation locks automatically once the Badge leaves the presence zone around it.
Does it work with our identity provider?
The Badge signs in to Windows and web apps through Microsoft Entra ID and Active Directory. Talk to us about your single sign-on setup.
Do clinicians need a smartphone?
No. Everything runs on the Badge.
See it on your ward
Book a 30-minute demo, or ask for a pilot kit with Badges and Bridges for one unit.
Book a DemoExplore the Badge