diff --git a/site/dashboard.html b/site/dashboard.html
index f68fc27..cad3743 100644
--- a/site/dashboard.html
+++ b/site/dashboard.html
@@ -797,13 +797,12 @@ function formatTime(epoch) {
   return d.toLocaleTimeString([], { hour12: false });
 }
 
-let qrLoaded = false;
 let mobilePort = 8765;
 function togglePhoneSetup() {
   const pop = document.getElementById('phoneSetupPopover');
   const isOpen = pop.style.display !== 'none';
   pop.style.display = isOpen ? 'none' : 'block';
-  if (!isOpen && !qrLoaded) {
+  if (!isOpen) {
     if (window.innerWidth <= 700) {
       document.getElementById('qrContainer').style.display = 'none';
       const linkEl = document.getElementById('phoneSetupLink');
@@ -813,7 +812,6 @@ function togglePhoneSetup() {
     } else {
       fetch(API + '/qr').then(r => r.text()).then(svg => {
         document.getElementById('qrContainer').innerHTML = svg;
-        qrLoaded = true;
       }).catch(() => {
         document.getElementById('qrContainer').innerHTML = '<div class="empty-state">Could not load QR</div>';
       });
diff --git a/src/api.rs b/src/api.rs
index 56e5b75..e036506 100644
--- a/src/api.rs
+++ b/src/api.rs
@@ -956,7 +956,10 @@ async fn serve_qr(State(ctx): State<Arc<ServerCtx>>) -> Result<impl IntoResponse
         .dark_color(qrcode::render::svg::Color("#2c2418"))
         .light_color(qrcode::render::svg::Color("#faf7f2"))
         .build();
-    Ok(([(header::CONTENT_TYPE, "image/svg+xml")], svg))
+    Ok(([
+        (header::CONTENT_TYPE, "image/svg+xml"),
+        (header::CACHE_CONTROL, "no-store"),
+    ], svg))
 }
 
 async fn serve_fonts_css() -> impl IntoResponse {