diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index dec47e73..d29a1138 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -62,6 +62,9 @@ jobs:
       - name: Build executables
         run: npm run package
         timeout-minutes: 20
+        env:
+          WIN_CSC_LINK: ${{ secrets.WIN_CSC_LINK }}
+          WIN_CSC_KEY_PASSWORD: ${{ secrets.WIN_CSC_KEY_PASSWORD }}
 
       - name: Upload artifacts
         uses: actions/upload-artifact@v4
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a1394588..851554ba 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,11 @@
 
 All notable changes to this project will be documented in this file.
 
+## [Unreleased]
+
+### Added
+- Windows code signing configuration to prevent antivirus false positives
+
 ## [0.0.2] - 2025-08-03
 
 ### Added
diff --git a/electron-builder.json b/electron-builder.json
index 2ede976e..cfc1383e 100644
--- a/electron-builder.json
+++ b/electron-builder.json
@@ -36,7 +36,12 @@
         "arch": ["x64"]
       }
     ],
-    "icon": "assets/icons/VibeTree.png"
+    "icon": "assets/icons/VibeTree.png",
+    "certificateSubjectName": null,
+    "certificateSha1": null,
+    "signingHashAlgorithms": ["sha256"],
+    "rfc3161TimeStampServer": "http://timestamp.digicert.com",
+    "signDlls": true
   },
   "nsis": {
     "oneClick": false,