Detects login + 2FA forms and autofills TOTP codes. Two-step email flow, QR scan, encrypted vault, otpauth import/export.