This question already has an answer here:
In some online banking sites, they provide a virtual onscreen keyboard(the keys will be shifted randomly when each time you open it. Not in the QWERTY order).
If we use such keyboard, any keylogger application can log/capture the keys clicked.
Assume The input element for username and password is not accessible.