Leaderboard

Currently, the extension doesn't fully support filling in all six individual 2FA fields. However, it can automatically populate most of the six-digit TOTP fields because the website handles that internally. The extension intelligently guesses the single TOTP field based on common keywords and tries to autofill it. Then, the website distributes the filled TOTP contents across the six fields. This behavior is also seen in PayPal.

Solved, I think (correct me if I’m wrong). Leaving it up for people with a similar issue. For some reason, if you forget to switch the pre-selected category of "password" in the according drop-down to "PIN", a short numerical PIN is instantly flagged as compromised. Switching to "PIN" category removed the warning. A bit confusing, as the displayed warning does not indicate this scenario as part of the security check or potential cause for the warning, but rather only points to "online exposed passwords".