OTP login field missing autocomplete='one-time-code' - Apple autofills wrong number
N
Niki Thayer
When requesting a 2FA/OTP code sent via SMS during login, the code input field doesn't trigger Android's WebOTP autofill. Instead, the keyboard suggests a saved contact's phone number (since the field isn't tagged with autocomplete='one-time-code'). making it look like the OTP field is prefilled with the wrong value. Users have to dismiss the suggestion and manually copy the code from their text messages. Adding the proper autocomplete attribute to the OTP input field would let Android autofill the actual SMS code automatically, as it does on most modern login flows.
Log In