I wonder how they get around the two level authentication problem? Even if I give my password to the scraper an extra credential would be required. How do you w

I wonder how they get around the two level authentication problem? Even if I give my password to the scraper an extra credential would be required. How do you workaround that?