diff --git a/CLAUDE.md b/CLAUDE.md
index 50e8e83..9d82644 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -93,7 +93,7 @@ Entry point: `main.go` → opens SQLite DB → runs CLI or starts HTTP server on
 - `phoenix/` — HTTP client for Phoenix Server API (invoices, payments, balance, channels). Uses basic auth from phoenix config (password cached at startup with `sync.Once`)
 - `crypto/` — AES-CMAC authentication and AES decryption for Bolt Card NFC protocol
 - `util/` — Error handling helpers (`CheckAndLog`), random hex generation, QR code encoding
-- `build/` — Version string (currently "0.22.0"), date/time injected at build
+- `build/` — Version string (currently "0.22.1"), date/time injected at build
 - `web-content/` — Static assets under `public/`, SPA build output under `admin/spa/`
 
 ### Route Groups (`web/app.go`)
diff --git a/docker/card/admin-ui/src/components/two-factor-card.tsx b/docker/card/admin-ui/src/components/two-factor-card.tsx
index 77a77cc..f5d230c 100644
--- a/docker/card/admin-ui/src/components/two-factor-card.tsx
+++ b/docker/card/admin-ui/src/components/two-factor-card.tsx
@@ -171,7 +171,14 @@ export function TwoFactorCard() {
 
       {/* Recovery codes shown once */}
       <Dialog open={!!recoveryCodes} onOpenChange={(o) => !o && setRecoveryCodes(null)}>
-        <DialogContent>
+        <DialogContent
+          onKeyDown={(e) => {
+            if (e.key === "Enter") {
+              e.preventDefault();
+              setRecoveryCodes(null);
+            }
+          }}
+        >
           <DialogHeader>
             <DialogTitle>Save your recovery codes</DialogTitle>
           </DialogHeader>
diff --git a/docker/card/build/build.go b/docker/card/build/build.go
index 5340356..5fac32c 100644
--- a/docker/card/build/build.go
+++ b/docker/card/build/build.go
@@ -1,5 +1,5 @@
 package build
 
-var Version string = "0.22.0"
+var Version string = "0.22.1"
 var Date string
 var Time string