diff --git a/README.md b/README.md
index 328e407..2670842 100644
--- a/README.md
+++ b/README.md
@@ -135,6 +135,12 @@ real API response (fixed to derive them from `connectedToControl` and
 `enabledRoutes`). See the git log for the full verification notes per
 integration.
 
+The app is installable as a PWA — "Install app" / "Add to Home Screen" from the
+browser gives it its own icon and a standalone window on phone or desktop. This
+needs the site to be served over HTTPS (browsers only offer install on secure
+origins; `localhost` also counts). The bundled service worker deliberately
+caches nothing, so an installed copy always shows the current build.
+
 ## Requirements
 
 - Node.js 20+
diff --git a/web/index.html b/web/index.html
index 60151f2..4d45d67 100644
--- a/web/index.html
+++ b/web/index.html
@@ -4,6 +4,13 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Homelab Manager</title>
+    <link rel="manifest" href="/manifest.webmanifest" />
+    <link rel="icon" type="image/png" href="/icon-192.png" />
+    <link rel="apple-touch-icon" href="/apple-touch-icon.png" />
+    <meta name="theme-color" content="#182433" />
+    <meta name="mobile-web-app-capable" content="yes" />
+    <meta name="apple-mobile-web-app-capable" content="yes" />
+    <meta name="apple-mobile-web-app-title" content="Homelab" />
     <script>
       (function () {
         try {
diff --git a/web/public/apple-touch-icon.png b/web/public/apple-touch-icon.png
new file mode 100644
index 0000000..141e9db
Binary files /dev/null and b/web/public/apple-touch-icon.png differ
diff --git a/web/public/icon-192.png b/web/public/icon-192.png
new file mode 100644
index 0000000..fd04e10
Binary files /dev/null and b/web/public/icon-192.png differ
diff --git a/web/public/icon-512.png b/web/public/icon-512.png
new file mode 100644
index 0000000..78cf380
Binary files /dev/null and b/web/public/icon-512.png differ
diff --git a/web/public/icon-maskable-512.png b/web/public/icon-maskable-512.png
new file mode 100644
index 0000000..34dc6e9
Binary files /dev/null and b/web/public/icon-maskable-512.png differ
diff --git a/web/public/manifest.webmanifest b/web/public/manifest.webmanifest
new file mode 100644
index 0000000..4af9d6d
--- /dev/null
+++ b/web/public/manifest.webmanifest
@@ -0,0 +1,16 @@
+{
+  "id": "/",
+  "name": "Homelab Manager",
+  "short_name": "Homelab",
+  "description": "One dashboard for Proxmox, Synology, Docker, Tailscale, DNS, and more.",
+  "start_url": "/",
+  "scope": "/",
+  "display": "standalone",
+  "background_color": "#182433",
+  "theme_color": "#182433",
+  "icons": [
+    { "src": "/icon-192.png", "sizes": "192x192", "type": "image/png", "purpose": "any" },
+    { "src": "/icon-512.png", "sizes": "512x512", "type": "image/png", "purpose": "any" },
+    { "src": "/icon-maskable-512.png", "sizes": "512x512", "type": "image/png", "purpose": "maskable" }
+  ]
+}
diff --git a/web/public/sw.js b/web/public/sw.js
new file mode 100644
index 0000000..12db9af
--- /dev/null
+++ b/web/public/sw.js
@@ -0,0 +1,8 @@
+// Exists so browsers treat the app as installable. It deliberately caches
+// nothing and never calls respondWith(): every request goes to the network
+// exactly as if there were no service worker. A caching worker would keep
+// serving an old JS bundle after a rebuild, and this app is a live view of
+// authenticated data with no useful offline mode anyway.
+self.addEventListener("install", () => self.skipWaiting());
+self.addEventListener("activate", (event) => event.waitUntil(self.clients.claim()));
+self.addEventListener("fetch", () => {});
diff --git a/web/src/main.tsx b/web/src/main.tsx
index 33db27d..c51ebaa 100644
--- a/web/src/main.tsx
+++ b/web/src/main.tsx
@@ -5,6 +5,15 @@ import App from "./App";
 import "@tabler/core/dist/css/tabler.min.css";
 import "./styles.css";
 
+// Production only — in dev the worker would just add another layer between Vite and the browser.
+if ("serviceWorker" in navigator && import.meta.env.PROD) {
+  window.addEventListener("load", () => {
+    navigator.serviceWorker.register("/sw.js").catch(() => {
+      // Installability is a nicety; the app works fine without a worker.
+    });
+  });
+}
+
 ReactDOM.createRoot(document.getElementById("root")!).render(
   <React.StrictMode>
     <BrowserRouter>