A device, comprising: a login agent module configured to cause a prompt to be presented by a user interface in the device, the prompt requesting login information to be entered into the device; a secure user authentication module configured to be loaded into a secure memory space in the device; an operating system login authentication module configured to receive the login information from the login agent module and to transmit a signed login success message to the secure user authentication module based on the login information, wherein the secure user authentication module is further configured to transmit an encrypted authentication message to the operating system login authentication module based on receipt of the signed login success message and based on authenticating the signed login success message, and wherein the operating system login authentication module is further configured to grant access to the device based on receipt and authentication of the encrypted authentication message; and a secure login policy module configured to at least determine a context for the device and to set a login policy for at least one of the login agent module or the operating system login authentication module based on the context, wherein the secure user authentication module is further configured to cause the device to shut down if a signed login success message is not received, and the secure policy login module is further configured to set an amount of time for the secure user authentication module to wait for receipt of the signed login success message before causing the device to shut down. a login agent module configured to cause a prompt to be presented by a user interface in the device, the prompt requesting login information to be entered into the device; a secure user authentication module configured to be loaded into a secure memory space in the device; an operating system login authentication module configured to receive the login information from the login agent module and to transmit a signed login success message to the secure user authentication module based on the login information, wherein the secure user authentication module is further configured to transmit an encrypted authentication message to the operating system login authentication module based on receipt of the signed login success message and based on authenticating the signed login success message, and wherein the operating system login authentication module is further configured to grant access to the device based on receipt and authentication of the encrypted authentication message; and a secure login policy module configured to at least determine a context for the device and to set a login policy for at least one of the login agent module or the operating system login authentication module based on the context, wherein the secure user authentication module is further configured to cause the device to shut down if a signed login success message is not received, and the secure policy login module is further configured to set an amount of time for the secure user authentication module to wait for receipt of the signed login success message before causing the device to shut down. <EOS>