diff --git a/app/views/devise/two_factor_authentication/max_login_attempts_reached.html.erb b/app/views/devise/two_factor_authentication/max_login_attempts_reached.html.erb
new file mode 100644
index 000000000..7ff3d2d0e
--- /dev/null
+++ b/app/views/devise/two_factor_authentication/max_login_attempts_reached.html.erb
@@ -0,0 +1,12 @@
+<% content_for :title, I18n.t("devise.two_factor_authentication.max_login_attempts_reached") %>
+
+<div class="govuk-grid-row">
+  <div class="govuk-grid-column-two-thirds">
+    <h1 class="govuk-heading-l">
+      <%= content_for(:title) %>
+    </h1>
+
+    <p><%= I18n.t("devise.two_factor_authentication.account_locked") %></p>
+    <p><%= I18n.t("devise.two_factor_authentication.contact_administrator") %></p>
+  </div>
+</div>
diff --git a/config/locales/en.yml b/config/locales/en.yml
index 0aabc8da4..8664dcf1f 100644
--- a/config/locales/en.yml
+++ b/config/locales/en.yml
@@ -126,8 +126,9 @@ en:
     two_factor_authentication:
       success: "Two factor authentication successful."
       attempt_failed: "Attempt failed."
-      max_login_attempts_reached: "Access completely denied as you have reached your attempts limit"
-      contact_administrator: "Please contact your system administrator."
+      max_login_attempts_reached: "Too many incorrect login attempts"
+      account_locked: "Your account has been locked for security reasons."
+      contact_administrator: "Contact another helpdesk administrator."
       code_has_been_sent: "Your security code has been sent."
       code_required: "Security code is required"
       code_incorrect: "Security code is incorrect"