Inline TOTP chip now reads 2FA instead of the entry name, so the digits can't be mistaken for a password. The chip title still shows the actual 6-digit code (e.g. 482 901) — the favicon/initial on the left identifies the entry.
Passkey / Credential Manager is on by default for new installs. Existing users keep their stored setting.
Multi-part login flow keeps the smart TOTP timeout surfacing: refocusing the 2FA field after the 30-second code rotation gives the fresh chip automatically.