diff --git a/app/views/devise/two_factor_authentication/max_login_attempts_reached.html.erb b/app/views/devise/two_factor_authentication/max_login_attempts_reached.html.erb
new file mode 100644
index 000000000..3eae19de3
--- /dev/null
+++ b/app/views/devise/two_factor_authentication/max_login_attempts_reached.html.erb
@@ -0,0 +1,11 @@
+<% content_for :title, I18n.t("devise.two_factor_authentication.max_login_attempts_reached") %>
+
+<div class="govuk-grid-row">
+  <div class="govuk-grid-column-two-thirds">
+    <h1 class="govuk-heading-l">
+      <%= content_for(:title) %>
+    </h1>
+
+    <p><%= I18n.t("devise.two_factor_authentication.contact_administrator") %></p>
+  </div>
+</div>
diff --git a/config/locales/en.yml b/config/locales/en.yml
index 0aabc8da4..cccaed1e0 100644
--- a/config/locales/en.yml
+++ b/config/locales/en.yml
@@ -126,8 +126,8 @@ en:
     two_factor_authentication:
       success: "Two factor authentication successful."
       attempt_failed: "Attempt failed."
-      max_login_attempts_reached: "Access completely denied as you have reached your attempts limit"
-      contact_administrator: "Please contact your system administrator."
+      max_login_attempts_reached: "Too many incorrect attempts, your account has been locked"
+      contact_administrator: "Contact another helpdesk administrator."
       code_has_been_sent: "Your security code has been sent."
       code_required: "Security code is required"
       code_incorrect: "Security code is incorrect"