I hope someone from Twilio engineering or product management reads the complaints here and actually redesigns their login flow. Multi-step login flows are trash.
You'd really think these would be companies that would make a better job of this sort of thing - 'tech 4 tech' companies if you will.
They're not 'short-ish', they're shorter than... every actual 'session' I have with the site.
They're so short that I've been checking cookies and wondering what I'm blocking that's breaking it until I saw other comments here.
There doesn't seem much utility to me in having the website session expire before the screen locks - apart from anything else the computer quite likely has B2 keys or the consumer app installed if it had the website logged in.
Perhaps there's some other threat I'm missing?
If it's one screen I can just prefill both at once.
They have both fields in the HTML, but the password is hidden until the email is submitted. My 1Password iOS integration handles that fine - when I go to the second step, password is there.