A computer-implemented method comprising: initiating, by an operating system of a computing device, a first user login session as running in a context of a first user profile with the operating system of the computing device; receiving, by the operating system, a request to run the first user login session in a context of a second user profile, wherein the request is received through interaction with an application that is executed by the computing device; securely verifying credentials associated with the second user profile received as part of the request; responsive to the verifying, receiving data including settings and preferences associated with the second user profile via a network that is usable to associate the second user profile with a shadow login session configured to support simultaneous interaction by a plurality of users with the operating system of the computing device; and creating the shadow login session within the first user login session of the operating system of the computing device based on the received data, such that permissions and functionality of the shadow login session are inherited from the first user login session thereby limiting which functionality of the operating system is made available to the shadow login session; and associating, by the operating system, the second user profile with the shadow login session created within the first user login session of the operating system of the computing device based on the received data; and executing the application such that interaction of the second user profile with the application is associated with the second user profile and interaction of the first user profile with the application is associated with the first user profile, wherein the interaction of the first and the second user profile with the application is performed without switching a login. initiating, by an operating system of a computing device, a first user login session as running in a context of a first user profile with the operating system of the computing device; receiving, by the operating system, a request to run the first user login session in a context of a second user profile, wherein the request is received through interaction with an application that is executed by the computing device; securely verifying credentials associated with the second user profile received as part of the request; responsive to the verifying, receiving data including settings and preferences associated with the second user profile via a network that is usable to associate the second user profile with a shadow login session configured to support simultaneous interaction by a plurality of users with the operating system of the computing device; and creating the shadow login session within the first user login session of the operating system of the computing device based on the received data, such that permissions and functionality of the shadow login session are inherited from the first user login session thereby limiting which functionality of the operating system is made available to the shadow login session; and associating, by the operating system, the second user profile with the shadow login session created within the first user login session of the operating system of the computing device based on the received data; and executing the application such that interaction of the second user profile with the application is associated with the second user profile and interaction of the first user profile with the application is associated with the first user profile, wherein the interaction of the first and the second user profile with the application is performed without switching a login.