diff --git a/README.md b/README.md
index ad0a89a..4c463b5 100644
--- a/README.md
+++ b/README.md
@@ -153,7 +153,7 @@ Open http://localhost:5173 in dev (or http://localhost:8080 for the production b
 
 ### Version numbers
 
-`ihasmail v2.16.57`, as shown in Settings › About and by `/api/health`:
+`ihasmail v2.16.57`, shown on the sign-in page, in Settings › About, and by `/api/health`:
 
 | | |
 | --- | --- |
diff --git a/web/src/views/Login.tsx b/web/src/views/Login.tsx
index c5d831d..12fff9b 100644
--- a/web/src/views/Login.tsx
+++ b/web/src/views/Login.tsx
@@ -3,6 +3,7 @@ import { Eye, EyeOff, LogIn, ShieldCheck } from "lucide-react";
 import { useSession } from "@/store/session";
 import { ApiError } from "@/jmap/client";
 import { DEFAULT_SOURCE_URL } from "@/lib/source";
+import { APP_VERSION } from "@/lib/version";
 
 export function LoginPage() {
   const login = useSession((s) => s.login);
@@ -94,7 +95,13 @@ export function LoginPage() {
           {busy ? "Signing in…" : "Sign in"}
         </button>
         <p className="foot">
-          ihasmail by <a href="https://linuxexpert.org" target="_blank" rel="noopener noreferrer">linuxexpert.org</a>
+          {/*
+            The version sits next to the source link on purpose: the AGPL's
+            offer is for the source of *this* build, and a version makes that
+            offer something a person can actually act on. It also means a bug
+            report names the build without anyone having to sign in to find it.
+          */}
+          ihasmail v{APP_VERSION} by <a href="https://linuxexpert.org" target="_blank" rel="noopener noreferrer">linuxexpert.org</a>
           {" · "}
           <a href={sourceUrl} target="_blank" rel="noopener noreferrer">AGPL-3.0 source</a>
         </p>