diff --git a/authentication/tests.py b/authentication/tests.py
index 16a01b6..becf899 100644
--- a/authentication/tests.py
+++ b/authentication/tests.py
@@ -335,3 +335,30 @@ class MfaPageTests(TestCase):
         enrol_mfa(self.user)
 
         self.assertContains(self.client.get(reverse("mfa_reauthenticate")), "otp otp-lg")
+
+
+class ActionBarTests(TestCase):
+    """A form's action bar is drawn when the actions slot has content.
+
+    Regression: it was keyed on `no_visible_fields`, which allauth sets to say a form has
+    no visible *fields* — logout and TOTP deactivate are a bare csrf token plus a button.
+    Keying the bar on it hid the button on exactly the pages that are nothing but a button.
+    """
+
+    def setUp(self):
+        self.user = User.objects.create_user(email="mfa@example.com", password="pw-secret-123")
+        self.client.post(reverse("account_login"), {"login": "mfa@example.com", "password": "pw-secret-123"}, follow=True)
+
+    def test_the_sign_out_page_has_its_button(self):
+        response = self.client.get(reverse("account_logout"))
+
+        self.assertContains(response, "Sign Out")
+        self.assertContains(response, 'type="submit"')
+
+    def test_the_totp_deactivate_page_has_its_button(self):
+        enrol_mfa(self.user)
+
+        response = self.client.get(reverse("mfa_deactivate_totp"))
+
+        self.assertContains(response, "btn-error")
+        self.assertContains(response, 'type="submit"')
diff --git a/templates/allauth/elements/form.html b/templates/allauth/elements/form.html
index 64e47d5..3bbba1a 100644
--- a/templates/allauth/elements/form.html
+++ b/templates/allauth/elements/form.html
@@ -4,13 +4,18 @@
     `id` is not decorative: allauth renders out-of-band forms (webauthn, logout-from-stage)
     and points buttons at them with the HTML `form` attribute. Drop the id and those
     buttons submit nothing.
+
+    The action bar is drawn when the actions slot has something in it — NOT keyed on
+    `no_visible_fields`, which means the form has no visible *fields* (logout is a bare
+    csrf token, and so is TOTP deactivate) and says nothing about its buttons. Keying the
+    bar on it hides the Sign Out button on the very page whose only purpose is that button.
 {% endcomment %}
 <form method="{{ attrs.method }}"
       {% if attrs.id %}id="{{ attrs.id }}"{% endif %}
       {% if attrs.action %}action="{{ attrs.action }}"{% endif %}
       class="space-y-2">
     {% slot body %}{% endslot %}
-    {% if not attrs.no_visible_fields %}
+    {% if slots.actions %}
         <div class="card-actions justify-end pt-3">
             {% slot actions %}{% endslot %}
         </div>