diff --git a/packages/app/src/api/spheres.ts b/packages/app/src/api/spheres.ts
index bfde271..5bf2ed7 100644
--- a/packages/app/src/api/spheres.ts
+++ b/packages/app/src/api/spheres.ts
@@ -102,11 +102,15 @@ export function getSphereMembers(handle: string) {
   return apiFetch<{ members: MemberData[] }>(`/api/spheres/${encodeURIComponent(handle)}/members`);
 }
 
-export function inviteMember(handle: string, did: string, role: "admin" | "member" = "member") {
+export function inviteMember(
+  handle: string,
+  identifier: string,
+  role: "admin" | "member" = "member",
+) {
   return apiFetch(`/api/spheres/${encodeURIComponent(handle)}/members`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ did, role }),
+    body: JSON.stringify({ identifier, role }),
   });
 }
 
diff --git a/packages/app/src/pages/sphere-members.tsx b/packages/app/src/pages/sphere-members.tsx
index dfcfb44..27275da 100644
--- a/packages/app/src/pages/sphere-members.tsx
+++ b/packages/app/src/pages/sphere-members.tsx
@@ -41,7 +41,7 @@ export function SphereMembersPage() {
 
 function MembersContent({ handle, sphereName }: { handle: string; sphereName: string }) {
   const members = useQuery(() => getSphereMembers(handle), [handle]);
-  const inviteDid = useSignal("");
+  const inviteIdentifier = useSignal("");
   const inviteRole = useSignal<"admin" | "member">("member");
   const inviteError = useSignal("");
   const memberError = useSignal("");
@@ -51,13 +51,13 @@ function MembersContent({ handle, sphereName }: { handle: string; sphereName: st
 
   const handleInvite = async (e: Event) => {
     e.preventDefault();
-    const did = inviteDid.value.trim();
-    if (!did) return;
+    const identifier = inviteIdentifier.value.trim();
+    if (!identifier) return;
     inviting.value = true;
     inviteError.value = "";
     try {
-      await inviteMember(handle, did, inviteRole.value);
-      inviteDid.value = "";
+      await inviteMember(handle, identifier, inviteRole.value);
+      inviteIdentifier.value = "";
       members.refetch();
     } catch (err) {
       inviteError.value = err instanceof Error ? err.message : "Failed to invite member.";
@@ -179,9 +179,9 @@ function MembersContent({ handle, sphereName }: { handle: string; sphereName: st
               <input
                 class={`${ui.input} ${ui.flexGrow}`}
                 type="text"
-                placeholder="did:plc:..."
-                value={inviteDid.value}
-                onInput={(e) => (inviteDid.value = (e.target as HTMLInputElement).value)}
+                placeholder="handle or did:plc:..."
+                value={inviteIdentifier.value}
+                onInput={(e) => (inviteIdentifier.value = (e.target as HTMLInputElement).value)}
               />
               <select
                 class={ui.selectCompact}
diff --git a/packages/core/src/auth/client.ts b/packages/core/src/auth/client.ts
index 6b8c538..ef04a3a 100644
--- a/packages/core/src/auth/client.ts
+++ b/packages/core/src/auth/client.ts
@@ -59,14 +59,24 @@ export async function getOAuthClient(): Promise<NodeOAuthClient> {
  * the input unchanged (the OAuth client will resolve it via DNS).
  */
 export async function resolveHandle(handle: string): Promise<string> {
-  if (handle.startsWith("did:") || !pdsUrl) return handle;
+  if (handle.startsWith("did:")) return handle;
+  if (pdsUrl) {
+    try {
+      const res = await fetch(
+        `${pdsUrl}/xrpc/com.atproto.identity.resolveHandle?handle=${encodeURIComponent(handle)}`,
+      );
+      if (res.ok) {
+        const data = (await res.json()) as { did: string };
+        return data.did;
+      }
+    } catch {}
+  }
+  // Production: resolve via well-known endpoint
   try {
-    const res = await fetch(
-      `${pdsUrl}/xrpc/com.atproto.identity.resolveHandle?handle=${encodeURIComponent(handle)}`,
-    );
+    const res = await fetch(`https://${handle}/.well-known/atproto-did`);
     if (res.ok) {
-      const data = (await res.json()) as { did: string };
-      return data.did;
+      const did = (await res.text()).trim();
+      if (did.startsWith("did:")) return did;
     }
   } catch {}
   return handle;
diff --git a/packages/core/src/sphere/api/members.ts b/packages/core/src/sphere/api/members.ts
index 022405f..2f2a059 100644
--- a/packages/core/src/sphere/api/members.ts
+++ b/packages/core/src/sphere/api/members.ts
@@ -11,6 +11,7 @@ import { getActiveMemberRole, upsertMemberInvite, activateMember } from "../oper
 import { checkPermission } from "../../permissions/check.ts";
 import { findSphere } from "./helpers.ts";
 import { resolveDidHandles } from "../../identity/index.ts";
+import { resolveHandle } from "../../auth/client.ts";
 
 const SPHERE_COLLECTION = "site.exosphere.sphere.profile";
 const MEMBER_COLLECTION = "site.exosphere.sphere.member";
@@ -78,7 +79,17 @@ app.post("/:handle/members", requireAuth, async (c) => {
     return c.json({ error: z.flattenError(parsed.error) }, 400);
   }
 
-  const { did: memberDid, role } = parsed.data;
+  const { identifier, role } = parsed.data;
+
+  // Resolve handle → DID if the identifier isn't already a DID
+  let memberDid = identifier;
+  if (!identifier.startsWith("did:")) {
+    const resolved = await resolveHandle(identifier.replace(/^@/, ""));
+    if (!resolved.startsWith("did:")) {
+      return c.json({ error: "Could not resolve handle" }, 400);
+    }
+    memberDid = resolved;
+  }
 
   const db = getDb();
 
diff --git a/packages/core/src/sphere/schemas.ts b/packages/core/src/sphere/schemas.ts
index b36226f..3c24ed3 100644
--- a/packages/core/src/sphere/schemas.ts
+++ b/packages/core/src/sphere/schemas.ts
@@ -17,6 +17,6 @@ export const enableModuleSchema = z.object({
 });
 
 export const inviteMemberSchema = z.object({
-  did: z.string().startsWith("did:"),
+  identifier: z.string().min(1),
   role: z.enum(["admin", "member"]).default("member"),
 });