Pro Tip: Increase engagement stats by not setting focus to a form's first editable field.
A website's "stickiness" is determined in part by the duration of page visits. You can boost a page's average visit time by several seconds simply by not setting the focus to a form's first input. This works especially well for 2FA code entry page screens. Even on this most simple form with just a single text box and a button, you can almost quadruple the visit time by simply not setting the cursor at all.
Most often, users are already keeping their eyes on their phone or other device to read the random code. They'll usually type at least half the digits without realizing that the form isn't accepting the keystrokes.
Bonus Tip #1: Disable pasting into the textbox for "added security".
Bonus Tip #2: Make the textbox a password input. This increases page views due to increased failed attempts AND comes with bonus time when their browser prompts them to reset their actual password for the site.
Bonus Tip #3: Set focus to the Cancel button and disable clicking on the textbox. Users will have to tab until the cursor appears in that first box, reaping you addtional engagement.