## Highlights
- Inline TOTP chip now reads `2FA` instead of the entry name, so the digits can't be mistaken for a password. The chip title still shows the actual 6-digit code (e.g. `482 901`) — the favicon/initial on the left identifies the entry.
- Passkey / Credential Manager is on by default for new installs. Existing users keep their stored setting.
- Multi-part login flow keeps the smart TOTP timeout surfacing: refocusing the 2FA field after the 30-second code rotation gives the fresh chip automatically.