diff --git a/src/app.js b/src/app.js
index 212588e..08a8f24 100644
--- a/src/app.js
+++ b/src/app.js
@@ -53,6 +53,12 @@ app.get('/k/:token', (req, res) => {
   res.sendFile(path.join(__dirname, '..', 'public', 'kiosk.html'));
 });
 
+// dashboard.js itself bounces to /login.html if the session check fails,
+// so this one redirect covers both logged-in and logged-out visitors.
+app.get('/', (req, res) => {
+  res.redirect('/dashboard.html');
+});
+
 app.use(express.static(path.join(__dirname, '..', 'public')));
 
 app.use('/api', (req, res) => {