Send cellphone activation link (inc token) to student’s personal email
When clicked on a cellphone, download an app, and auth using token
Exchange a strong key (associate with the student)
To login, the app generates a OTP based on the key and current time
Reset / register new cellphone via a new activation link => easy
Everyday login via one-use codes => cannot be captured, cracked