diff --git a/authentication/tests.py b/authentication/tests.py
index d44dfe5..a3b62d7 100644
--- a/authentication/tests.py
+++ b/authentication/tests.py
@@ -276,6 +276,20 @@ class TwoFactorPageTests(TestCase):
self.assertEqual(otp.count(""), 6)
+ def test_the_boxes_are_wrapped_in_a_label_so_tapping_focuses_the_input(self):
+ # daisyUI's overlaid otp input carries `pointer-events: none` (so clicks land on the
+ # boxes, not a naked input) — which also means a tap on the boxes never reaches the
+ # input directly. A