The textbox in which you type the secret key for two-factor authentication should have autocomplete as disabled. The 6-digit number changes every 30 seconds, so there is no point in saving or autocompleting it.