diff --git a/app/templates/views/user-profile/confirm.html b/app/templates/views/user-profile/confirm.html
index 8acf8bcc9..0ea5c72ab 100644
--- a/app/templates/views/user-profile/confirm.html
+++ b/app/templates/views/user-profile/confirm.html
@@ -15,8 +15,12 @@
       <p>
         We’ve sent a security code to your new {{ thing }}.
       </p>
-      <form method="post">
-        {{ textbox(form_field) }}
+      <form method="post" autocomplete="off" novalidate>
+        {{ textbox(
+          form_field,
+          width='5em',
+          autofocus=True
+        ) }}
         {{ page_footer(
           'Confirm',
           destructive=destructive,