Login code screens split a six-digit code into six boxes held together by JavaScript, which breaks paste, Backspace, SMS and email autofill, password managers and screen readers. The article shows these failures in live demos, including in react-otp-input, which hardcodes autocomplete off, and input-otp, which needs 767 lines to hide a single input. The fix is one plain input with autocomplete="one-time-code", inputmode="numeric", maxlength and a pattern, and no script.