If I log onto a webpage my password manager fills in the details on my desktop If I have SMS, I then get a message on my phone which I have to enter Thus some

If I log onto a webpage my password manager fills in the details on my desktop If I have SMS, I then get a message on my phone which I have to enter Thus something hijacking my machine can't log on silently, even if it pulls the password out of my password manager