A website could send a push-notification to your phone. You as a user would then have to say "Yes Its me logging in" and voila your in.