diff --git a/app/lib/oauth-client.ts b/app/lib/oauth-client.ts
index ff6dd72..1c9d404 100644
--- a/app/lib/oauth-client.ts
+++ b/app/lib/oauth-client.ts
@@ -59,7 +59,9 @@ export function createOAuthClient(hooks?: SessionHooks): BrowserOAuthClient {
   }
 
   return new BrowserOAuthClient({
-    handleResolver: 'https://bsky.social',
+    // Authoritative (DNS/well-known) first, AppView fallback — see
+    // handle-resolver.ts for why bsky.social alone is not enough.
+    handleResolver: createLemmaHandleResolver(),
     clientMetadata: {
       client_id: `${origin}/oauth-client-metadata.json`,
       client_name: SITE_NAME,