diff --git a/server/templates/login_otp.html b/server/templates/login_otp.html
index 26da7d6f142090c55efd872bf046b3572866facf..ff88af3ecca29350d89c353234e4f3f6e4037c7e 100644
--- a/server/templates/login_otp.html
+++ b/server/templates/login_otp.html
@@ -29,7 +29,7 @@
 
     {{if .AuthResponse.Has2FAMethod "u2f"}}
 <p>
-  <a href="{{.URLPrefix}}/login?2fa=u2f">
+  <a href="{{.URLPrefix}}/login/u2f">
     Use a hardware token instead.
   </a>
 </p>
diff --git a/server/templates/login_u2f.html b/server/templates/login_u2f.html
index 4c58acccb42c4d28ca006f848874cbea250d23b0..0509d7fa1035ae394609cde3d4249ff816f43277 100644
--- a/server/templates/login_u2f.html
+++ b/server/templates/login_u2f.html
@@ -31,7 +31,7 @@
 
     {{if .AuthResponse.Has2FAMethod "otp"}}
 <p>
-  <a href="{{.URLPrefix}}/login?2fa=otp">
+  <a href="{{.URLPrefix}}/login/otp">
     Use a numeric one-time token instead.
   </a>
 </p>