Outside US lots of banks use apps to generate a token and authenticate website transactions.
custom apps, that allow no alternative.