Auth forms: autocomplete tokens (username/password/OTP)

What to look for

AFTER uses standard tokens: username, current-password, new-password, one-time-code.
BEFORE disables autocomplete and splits one-time codes into multiple boxes (harder to paste/review and often breaks OTP suggestions).

BEFOREFights autofill + forces re-typing

Typical issues: autocomplete="off" on auth, and multi-field OTP inputs.

AFTERCooperates with password managers

This is “boring HTML” on purpose: labels + names + the right autocomplete tokens.

Username or email Password New password (signup / reset) One-time code

Single-field OTP is easier to paste and works better with platform “SMS code” suggestion UIs.

Show minimal markup

<input name="username" autocomplete="username">
<input name="current-password" type="password" autocomplete="current-password">
<input name="new-password" type="password" autocomplete="new-password">
<input name="otp" inputmode="numeric" autocomplete="one-time-code">

Checklist + context

See: Auth forms autocomplete note.