diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
index 7db2bb1..483fdff 100644
--- a/.github/workflows/image.yml
+++ b/.github/workflows/image.yml
@@ -145,8 +145,12 @@ jobs:
       - name: Start the portal and wait for it to answer
         run: |
           secret_key=$(head -c 48 /dev/urandom | od -An -tx1 | tr -d ' \n')
+          # FairDM refuses to start in production without a backup key. This one lasts the run.
+          gpg --batch --passphrase '' --quick-generate-key portal-ci@example.invalid
+          backup_key=$(gpg --armor --export portal-ci@example.invalid)
           docker run -d --name portal --network host \
             -e DJANGO_SECRET_KEY="$secret_key" \
+            -e BACKUP_PUBLIC_KEY="$backup_key" \
             -e DJANGO_SITE_DOMAIN=localhost \
             -e POSTGRES_HOST=localhost -e POSTGRES_PORT=5432 \
             -e POSTGRES_USER=postgres -e POSTGRES_PASSWORD=postgres -e POSTGRES_DB=portal \
diff --git a/CHANGELOG.md b/CHANGELOG.md
index fea3920..16a6fe7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,11 @@ All notable changes to this repository are recorded here. The format follows
 
 ## [Unreleased]
 
+### Fixed
+
+- The image workflow starts the portal with a backup key made for the run. FairDM 0.3 refuses to
+  start in production without `BACKUP_PUBLIC_KEY`, so every portal on it failed this check.
+
 ## [v0.1.0] - 2026-10-19
 
 ### Added