There's a browser extension (Chrome/Safari/FF) that does the hookup. Basically it talks to our server to request a QR Code. When the code is scanned, the users credentials are encrypted on the phone, sent to our server which passes them along to the browser extension.

I do have a version that doesn't require the browser extension, but that does require the website to add some javascript and do some backend work to enable it.