If the authentication method identified is a generated secret 422, the method continues at step 450 of FIG. 4C. At step 450, the site sends to the mobile device a secret that it associates with the device identifier and the user receives the secret on the mobile device and enters it to the site, via a web page the site generates 452.