For a while (maybe pre-2015?) Charles Schwab had users append the 6 character 2FA code to the end of your password (which itself was limited to between 6 and 8 chars), so they were either splitting it client side or storing everything in plaintext...