Hacker News new | ask | show | jobs
by mark242 1853 days ago
Two-factor auth selecting focus and suddenly seeing a dropdown of old, worthless 6-digit numbers comes to mind.
2 comments

There is `autocomplete="one-time-code"` for this.

The autocomplete attribute is very extensive.

https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes...

I've never seen that in the wild.
Consider yourself lucky.

I don't recall the service, but one employer of mine had both the suggestions for the MFA token, and as an added bonus, the browser would attempt to correct the "typo" in my username.