diff --git a/apps/desktop/electron-builder.yml b/apps/desktop/electron-builder.yml
index 89a78b0..3d1601a 100644
--- a/apps/desktop/electron-builder.yml
+++ b/apps/desktop/electron-builder.yml
@@ -44,6 +44,8 @@ asarUnpack:
 # ────────────────────────────────────────────────────────────────────
 win:
   icon: build/icon.ico
+  # Stable artifacts must never silently fall back to an unsigned build.
+  forceCodeSigning: true
   target:
     - target: nsis
       arch: