diff --git a/afterPack.js b/afterPack.js
new file mode 100644
index 0000000..869b8ce
--- /dev/null
+++ b/afterPack.js
@@ -0,0 +1,11 @@
+import { execSync } from 'child_process';
+import path from 'path';
+
+export default async function afterPack({ appOutDir, packager }) {
+    if (packager.platform.name !== 'mac') return;
+
+    const appPath = path.join(appOutDir, `${packager.appInfo.productName}.app`);
+    console.log(`  • ad-hoc signing  path=${appPath}`);
+    execSync(`codesign --deep --force --sign - "${appPath}"`, { stdio: 'inherit' });
+    console.log(`  • ad-hoc signing complete`);
+}
diff --git a/package.json b/package.json
index 2ae1386..e99c710 100644
--- a/package.json
+++ b/package.json
@@ -22,6 +22,7 @@
     "directories": {
       "output": "release"
     },
+    "afterPack": "./afterPack.js",
     "files": [
       "dist/**/*",
       "electron/**/*"