A method on a first electronic device for enabling a user to access a secure website, the method comprising: authenticating, using the first electronic device, a user of the first electronic device to a browser application using browser credentials corresponding to a browser account for the user of the first electronic device; using the browser application that has been authenticated using the browser credentials corresponding to the browser account to detect navigation to a login page of the secure website, the secure website requiring user credentials for access thereto; detecting a presence of a mobile device proximal to the first electronic device; authenticating, by a processor of the first electronic device, the first electronic device to the mobile device, wherein authenticating the first electronic device to the mobile device comprises: establishing a secure channel between the first electronic device and the mobile device; and performing an application layer authentication between the browser application executing on the first electronic device and a credential manager application executing on the mobile device by receiving cryptographic data that includes a cryptographic nonce from the mobile device, hashing the browser credentials with the cryptographic data using a hash function to produce a hashed value, and sending the hashed value to the mobile device, wherein the credential manager application authenticates the browser application using the hashed value; responsive to authenticating the first electronic device to the mobile device, sending, to the mobile device an identification of the secure website; responsive to sending the identification of the secure website to the mobile device, receiving via the secure channel from the mobile device, user credentials based on the identification of the secure website; and populating the login page of the secure website with the received user credentials. authenticating, using the first electronic device, a user of the first electronic device to a browser application using browser credentials corresponding to a browser account for the user of the first electronic device; using the browser application that has been authenticated using the browser credentials corresponding to the browser account to detect navigation to a login page of the secure website, the secure website requiring user credentials for access thereto; detecting a presence of a mobile device proximal to the first electronic device; authenticating, by a processor of the first electronic device, the first electronic device to the mobile device, wherein authenticating the first electronic device to the mobile device comprises: establishing a secure channel between the first electronic device and the mobile device; and performing an application layer authentication between the browser application executing on the first electronic device and a credential manager application executing on the mobile device by receiving cryptographic data that includes a cryptographic nonce from the mobile device, hashing the browser credentials with the cryptographic data using a hash function to produce a hashed value, and sending the hashed value to the mobile device, wherein the credential manager application authenticates the browser application using the hashed value; responsive to authenticating the first electronic device to the mobile device, sending, to the mobile device an identification of the secure website; responsive to sending the identification of the secure website to the mobile device, receiving via the secure channel from the mobile device, user credentials based on the identification of the secure website; and populating the login page of the secure website with the received user credentials. establishing a secure channel between the first electronic device and the mobile device; and performing an application layer authentication between the browser application executing on the first electronic device and a credential manager application executing on the mobile device by receiving cryptographic data that includes a cryptographic nonce from the mobile device, hashing the browser credentials with the cryptographic data using a hash function to produce a hashed value, and sending the hashed value to the mobile device, wherein the credential manager application authenticates the browser application using the hashed value; responsive to authenticating the first electronic device to the mobile device, sending, to the mobile device an identification of the secure website; responsive to sending the identification of the secure website to the mobile device, receiving via the secure channel from the mobile device, user credentials based on the identification of the secure website; and populating the login page of the secure website with the received user credentials.