Here's what I do. The login page on my browser is sent to my phone which creates a https session with the remote website and then hands over the session back to the browser. The mechanics to do this are a bit tricky but like a few days of coding. The advantage: your password never ever enters your computer's RAM(or HDD/network)...take that keyloggers!