diff --git a/app/controllers/mfas_controller.rb b/app/controllers/mfas_controller.rb
index 87a0c2e..5676c0d 100644
--- a/app/controllers/mfas_controller.rb
+++ b/app/controllers/mfas_controller.rb
@@ -2,8 +2,10 @@ class MfasController < ApplicationController
     def new
         issuer = "Hidden Agenda Email"
         label = "#{issuer}:#{current_user.email}"
-        current_user.otp_secret = User.generate_otp_secret
-        current_user.save!
+        if current_user.otp_secret.to_s.length == 0
+            current_user.otp_secret = User.generate_otp_secret
+            current_user.save!
+        end
 
         qrcode = RQRCode::QRCode.new([{ data: current_user.otp_provisioning_uri(label, issuer: issuer), mode: :byte_8bit }])