bid_main/templates/bid_main/mfa/setup.html

@@ -65,7 +65,7 @@ Multi-factor Authentication Setup
     {% if recovery_codes %}
     <ul>
       {% for code in recovery_codes %}
-      <li>{{ code }}</li>
+      <li><code>{{ code }}</code></li>
       {% endfor %}
     </ul>
     {% endif %}

bid_main/views/mfa.py

@@ -70,7 +70,7 @@ class GenerateRecoveryView(mixins.MfaRequiredIfConfiguredMixin, View):
             # https://pages.nist.gov/800-63-3/sp800-63b.html#5122-look-up-secret-verifiers
             # don't use less than 64 bits
             device.token_set.create(token=random_hex(8).upper())
-        return redirect(reverse('bid_main:mfa') + '?display_recovery_codes=1')
+        return redirect(reverse('bid_main:mfa') + '?display_recovery_codes=1#recovery-codes')
 
 
 class InvalidateRecoveryView(mixins.MfaRequiredIfConfiguredMixin, View):