From 4865123d59dbc5d920999ffddd52e1a8dd93a3c0 Mon Sep 17 00:00:00 2001
From: James Cole <james@firefly-iii.org>
Date: Sat, 30 May 2026 04:22:21 +0200
Subject: [PATCH] Fixed #12305

---
 resources/lang/en_US/firefly.php            | 1 +
 resources/views/profile/mfa/enable-mfa.twig | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/resources/lang/en_US/firefly.php b/resources/lang/en_US/firefly.php
index f0b8dd9736..c25a790893 100644
--- a/resources/lang/en_US/firefly.php
+++ b/resources/lang/en_US/firefly.php
@@ -1416,6 +1416,7 @@ return [
     'pref_two_factor_auth_code_help'                      => 'Scan the QR code with an application on your phone such as Authy or Google Authenticator and enter the generated code. The QR code changes every time you visit this page. Make sure you use the most recent one.',
     'pref_two_factor_auth_reset_code'                     => 'Reset verification code',
     'pref_two_factor_auth_disable_2fa'                    => 'Disable MFA',
+    'pref_two_factor_qr_code' => 'QR code',
     '2fa_use_secret_instead'                              => 'If you cannot scan the QR code, feel free to use the secret instead: <code>:secret</code>.',
     '2fa_backup_codes'                                    => 'Store these backup codes for access in case you lose your device.',
     '2fa_already_enabled'                                 => 'Multi-factor authentication verification is already enabled.',
diff --git a/resources/views/profile/mfa/enable-mfa.twig b/resources/views/profile/mfa/enable-mfa.twig
index a901647917..65334927d8 100644
--- a/resources/views/profile/mfa/enable-mfa.twig
+++ b/resources/views/profile/mfa/enable-mfa.twig
@@ -19,7 +19,7 @@
                         </p>
                         <div class="form group">
                             <div class="col-sm-8 col-md-offset-4 hidden-print">
-                                {{ image|raw }}
+                                <img src="{{ image }}" alt="{{ 'pref_two_factor_qr_code'|_ }}">
                             </div>
                             <p class="hidden-print">
                                 {{ trans('firefly.2fa_use_secret_instead', {secret: secret|escape})|raw }}