diff --git a/providers/class-two-factor-totp.php b/providers/class-two-factor-totp.php
index 88831185..d51e4ab3 100644
--- a/providers/class-two-factor-totp.php
+++ b/providers/class-two-factor-totp.php
@@ -255,7 +255,7 @@ public static function generate_qr_code_url( $user, $secret_key ) {
 		 * @param WP_User $user     The user object.
 		 */
 		$totp_url = apply_filters( 'two_factor_totp_url', $totp_url, $user );
-		$totp_url = esc_url( $totp_url, array( 'otpauth' ) );
+		$totp_url = esc_url_raw( $totp_url, array( 'otpauth' ) );
 
 		return $totp_url;
 	}