When you enter a username and password, they authenticate them with the bank, and receive a token. They store that token, not your credentials.

If I remember correctly, Mint is owned by Intuit, and subject to regular audits by the banks they've partnered with. Considering the relative quality of banking websites, I feel more secure checking my balance on Mint than via the official portal.