For this sort of application, you can check out my Tasker script: that’s exactly what it does (that is, scan a dumb NFC chip and type a password in an application with as much “security” as the medium affords):
Crypto is better of course, but when neither the app nor the chip provide it, I reckon that’s as good as it gets. Security through obscurity.