Phrase to customize: svPasswordTools_trust_device_desc_x /svPasswordTools_trust_this_device_for_30_days_x
Only plural phrases, because why would you force 2fa to 1 day. That is horrible.
Reduce pwnedpassword check HTTP request time-out from 2 seconds to 1 second as this blocks the login request, the request should only take a few 10s of milliseconds, so fail faster instead of waiting
Add password test page, this tests all the ways a password could fail including methods which aren't enabled