2FA webdev atrocities that should be punishable by law:
* not immediately giving the second factor input keyboard focus
* auto-submitting on the last digit
Extra hell for doing both:
1. Type second factor
2. Look at screen - nothing.
3. Ugh! Click the Single Fucking Input On The Page.
4. Type factor again, be sloppy because annoyed
5. Look up, see your typo vanish behind a spinner
6. "Invalid code. Try again."đ„đ„đ„
I'm good at keebin' and I still look at my hands while typing second factors.
â 



