diff --git a/.changeset/tall-mails-kiss.md b/.changeset/tall-mails-kiss.md
new file mode 100644
index 0000000000..b25b9bb067
--- /dev/null
+++ b/.changeset/tall-mails-kiss.md
@@ -0,0 +1,5 @@
+---
+"@siteimprove/alfa-rules": patch
+---
+
+**Fixed:** SIA-R10 now correctly accepts the `one-time-code` token.
diff --git a/packages/alfa-rules/src/sia-r10/rule.ts b/packages/alfa-rules/src/sia-r10/rule.ts
index d7c4ca995c..bb45fb9a13 100644
--- a/packages/alfa-rules/src/sia-r10/rule.ts
+++ b/packages/alfa-rules/src/sia-r10/rule.ts
@@ -117,6 +117,7 @@ const unmodifiables = Array.from([
   "username",
   "new-password",
   "current-password",
+  "one-time-code",
   "organization-title",
   "organization",
   "street-address",