diff --git a/web/src/app/login/page.tsx b/web/src/app/login/page.tsx
index 257f7b4..459543d 100644
--- a/web/src/app/login/page.tsx
+++ b/web/src/app/login/page.tsx
@@ -15,6 +15,20 @@ export default async function LoginPage({
       <form className="login-card" action="/api/session" method="post">
         <h1 className="title">FatihsMG4</h1>
         <p className="subtitle">Tüketim ve şarj geçmişi</p>
+        {/*
+          A hidden username so password managers will offer to save this.
+          Most of them ignore a lone password field — they key a saved entry on
+          (origin, username), and with nothing to key on they stay quiet. There is only
+          ever one account here, so the value is fixed and the server never reads it.
+        */}
+        <input
+          type="text"
+          name="username"
+          value="fatih"
+          autoComplete="username"
+          readOnly
+          hidden
+        />
         <input
           className="field"
           type="password"