diff --git a/management/templates/mfa.html b/management/templates/mfa.html
index f45b263f..bfa9a8f6 100644
--- a/management/templates/mfa.html
+++ b/management/templates/mfa.html
@@ -67,12 +67,12 @@ and ensure every administrator account for this control panel does the same.</st
         </div>
 
         <div class="form-group">
-            <label for="otp-label" style="font-weight: normal">3. Optionally, give your device a label so that you can remember what device you set it up on:</label>
+            <label for="totp-setup-label" style="font-weight: normal">3. Optionally, give your device a label so that you can remember what device you set it up on:</label>
             <input type="text" id="totp-setup-label" class="form-control" placeholder="my phone" />
         </div>
 
         <div class="form-group">
-            <label for="otp" style="font-weight: normal">4. Use the app to generate your first six-digit code and enter it here:</label>
+            <label for="totp-setup-token" style="font-weight: normal">4. Use the app to generate your first six-digit code and enter it here:</label>
             <input type="text" id="totp-setup-token" class="form-control" placeholder="6-digit code" />
         </div>
 
@@ -132,6 +132,7 @@ and ensure every administrator account for this control panel does the same.</st
     function render_totp_setup(provisioned_totp) {
         var img = document.createElement('img');
         img.src = "data:image/png;base64," + provisioned_totp.qr_code_base64;
+        img.alt = "QR code, scan this in your authenticator app"
 
         var code = document.createElement('div');
         code.innerHTML = `Secret: ${provisioned_totp.secret}`;