diff --git a/apps/browser/src/auth/popup/two-factor.component.html b/apps/browser/src/auth/popup/two-factor.component.html
index d03c675abdc..7fec67378cc 100644
--- a/apps/browser/src/auth/popup/two-factor.component.html
+++ b/apps/browser/src/auth/popup/two-factor.component.html
@@ -113,10 +113,7 @@ <h1 class="center">
       "
     >
       <div id="duo-frame">
-        <iframe
-          id="duo_iframe"
-          sandbox="allow-scripts allow-forms allow-same-origin allow-popups allow-popups-to-escape-sandbox"
-        ></iframe>
+        <iframe id="duo_iframe" sandbox="allow-scripts allow-forms allow-same-origin"></iframe>
       </div>
       <div class="box">
         <div class="box-content">
diff --git a/apps/desktop/src/auth/two-factor.component.html b/apps/desktop/src/auth/two-factor.component.html
index 2b9a1722ee0..cd21f91f59e 100644
--- a/apps/desktop/src/auth/two-factor.component.html
+++ b/apps/desktop/src/auth/two-factor.component.html
@@ -83,10 +83,7 @@ <h1>{{ title }}</h1>
       "
     >
       <div id="duo-frame">
-        <iframe
-          id="duo_iframe"
-          sandbox="allow-scripts allow-forms allow-same-origin allow-popups allow-popups-to-escape-sandbox"
-        ></iframe>
+        <iframe id="duo_iframe" sandbox="allow-scripts allow-forms allow-same-origin"></iframe>
       </div>
       <div class="box last">
         <div class="box-content">
diff --git a/apps/web/src/app/auth/two-factor.component.html b/apps/web/src/app/auth/two-factor.component.html
index 99d40e1f3e0..e3617a16589 100644
--- a/apps/web/src/app/auth/two-factor.component.html
+++ b/apps/web/src/app/auth/two-factor.component.html
@@ -92,7 +92,7 @@
             <div id="duo-frame" class="mb-3">
               <iframe
                 id="duo_iframe"
-                sandbox="allow-scripts allow-forms allow-same-origin allow-popups allow-popups-to-escape-sandbox"
+                sandbox="allow-scripts allow-forms allow-same-origin"
               ></iframe>
             </div>
           </ng-container>