NEURALNG

INPUTOTP

Accessibility

Native single-character inputs remain individually operable inside one named group.

Group and cell semantics

The root is a named role="group". Every cell announces its position and total; required, invalid and busy states are exposed without replacing native inputs.

Keyboard

Backspace clears or returns, Delete clears in place, arrows move logically, and Home/End jump to boundaries. Arrow behavior reverses correctly in RTL.

Autofill and paste

Only the first cell requests one-time-code. Platform autofill and multi-character paste are sanitized and distributed from the active cell.

Security boundary

Masking only reduces shoulder-surfing. Verification, expiration, replay protection, retry limits and rate limiting must run on the server.