An end-user mobile device comprising: a cellular network modem; and means for including secure credentials; one or more device service processors configured to initiate an activation sequence, the activation sequence automatically triggered by one or more of the service processors when (i) the mobile device is configured to use pre-activation credentials from the means for including secure credentials to access a first cellular access network through the cellular network modem, and (ii) a user attempts to use the mobile device in a manner that would require access to the Internet through the first cellular access network; and wherein the one or more service processors guide the activation sequence such that the mobile device connects to an activation server through the cellular network modem and the first cellular access network, using the pre-activation credentials from the means for including secure credentials, the mobile device receives, from the activation server over the first cellular access network, a set of multiple cellular network service options, including for each of multiple cellular network service carriers at least one option for activating service on that service carrier, the mobile device accepts input from the user to select a first one of the cellular network service options for a first one of the cellular network service carriers and request activation of the first service option, the mobile device forwards, based on the input, an activation request for the first service option to the activation server, the mobile device receives from the activation server a set of permanent credentials corresponding to the first service option and first service carrier and automatically stores the permanent credentials in the means for including secure credentials so as to supersede the pre-activation credentials, and the mobile device uses the set of permanent credentials to connect to a second cellular access network corresponding to the set of permanent credentials. a cellular network modem; and means for including secure credentials; one or more device service processors configured to initiate an activation sequence, the activation sequence automatically triggered by one or more of the service processors when (i) the mobile device is configured to use pre-activation credentials from the means for including secure credentials to access a first cellular access network through the cellular network modem, and (ii) a user attempts to use the mobile device in a manner that would require access to the Internet through the first cellular access network; and (i) the mobile device is configured to use pre-activation credentials from the means for including secure credentials to access a first cellular access network through the cellular network modem, and (ii) a user attempts to use the mobile device in a manner that would require access to the Internet through the first cellular access network; and wherein the one or more service processors guide the activation sequence such that the mobile device connects to an activation server through the cellular network modem and the first cellular access network, using the pre-activation credentials from the means for including secure credentials, the mobile device receives, from the activation server over the first cellular access network, a set of multiple cellular network service options, including for each of multiple cellular network service carriers at least one option for activating service on that service carrier, the mobile device accepts input from the user to select a first one of the cellular network service options for a first one of the cellular network service carriers and request activation of the first service option, the mobile device forwards, based on the input, an activation request for the first service option to the activation server, the mobile device receives from the activation server a set of permanent credentials corresponding to the first service option and first service carrier and automatically stores the permanent credentials in the means for including secure credentials so as to supersede the pre-activation credentials, and the mobile device uses the set of permanent credentials to connect to a second cellular access network corresponding to the set of permanent credentials. the mobile device connects to an activation server through the cellular network modem and the first cellular access network, using the pre-activation credentials from the means for including secure credentials, the mobile device receives, from the activation server over the first cellular access network, a set of multiple cellular network service options, including for each of multiple cellular network service carriers at least one option for activating service on that service carrier, the mobile device accepts input from the user to select a first one of the cellular network service options for a first one of the cellular network service carriers and request activation of the first service option, the mobile device forwards, based on the input, an activation request for the first service option to the activation server, the mobile device receives from the activation server a set of permanent credentials corresponding to the first service option and first service carrier and automatically stores the permanent credentials in the means for including secure credentials so as to supersede the pre-activation credentials, and the mobile device uses the set of permanent credentials to connect to a second cellular access network corresponding to the set of permanent credentials.