diff --git a/setup.iss b/setup.iss
index 268c470..4eff24b 100644
--- a/setup.iss
+++ b/setup.iss
@@ -28,6 +28,8 @@ OutputBaseFilename=Envoy-v{#MyAppVersion}-setup
 Compression=lzma2/ultra64
 SolidCompression=yes
 WizardStyle=modern
+SetupIconFile=src\Envoy.UI\Envoy.ico
+UninstallDisplayIcon={app}\{#MyAppExeName}
 UninstallDisplayName={#MyAppName} Job Application Agent
 VersionInfoVersion={#MyAppVersionInfo}
 VersionInfoCompany={#MyAppPublisher}
diff --git a/src/Envoy.UI/Envoy.UI.csproj b/src/Envoy.UI/Envoy.UI.csproj
index 12ae871..15e6dfb 100644
--- a/src/Envoy.UI/Envoy.UI.csproj
+++ b/src/Envoy.UI/Envoy.UI.csproj
@@ -8,6 +8,9 @@
     <UseWPF>true</UseWPF>
     <AssemblyName>Envoy</AssemblyName>
     <RootNamespace>Envoy.UI</RootNamespace>
+    <!-- Embeds the ghost icon as the exe's Win32 icon; WPF uses it for the window
+         title bar and taskbar too, and Start-menu/desktop shortcuts inherit it. -->
+    <ApplicationIcon>Envoy.ico</ApplicationIcon>
   </PropertyGroup>
 
   <ItemGroup>
diff --git a/src/Envoy.UI/Envoy.ico b/src/Envoy.UI/Envoy.ico
new file mode 100644
index 0000000..14d1ec8
Binary files /dev/null and b/src/Envoy.UI/Envoy.ico differ