2FA login form should have autocomplete turned off
The 2FA form should have autocomplete disabled (cf. https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion) As it is, the browser remembers and offers to autocomplete every previous 2FA code you've ever used, which is messy and unhelpful.
1
vote
JD Weiner
shared this idea