I use the bank web site, with a hardware TAN generator. If no bank offers that option you can use a dedicated device that is used just for that. My bank's app works on Graphene OS though.