diff --git a/modules/material/themes/material/mfa/new-backup-codes.twig b/modules/material/themes/material/mfa/new-backup-codes.twig
index d7938fa..5219baf 100644
--- a/modules/material/themes/material/mfa/new-backup-codes.twig
+++ b/modules/material/themes/material/mfa/new-backup-codes.twig
@@ -131,7 +131,7 @@
           <div class="mdl-card__supporting-text">
             <p>
               {{ '{mfa:new_codes_failed}'|trans }}
-              <a href="{{ mfaSetupUrl }}" target="_blank">{{ mfaSetupUrl }}</a>
+              <a href="{{ mfaSetupUrl }}" target="_blank" rel="noopener">{{ mfaSetupUrl }}</a>
             </p>
           </div>
         </div>