diff --git a/.dockerignore b/.dockerignore
index 3c53eedb9..6c53a5d22 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -35,4 +35,7 @@ certificates/
 # Exclude development files
 *.log
 *.env
-*.env.*
\ No newline at end of file
+*.env.*
+
+# Exclude local built web app index.html, must be generated fresh during Docker build for correct fingerprinting
+apps/server/AliasVault.Client/wwwroot/index.html
diff --git a/dockerfiles/all-in-one/Dockerfile b/dockerfiles/all-in-one/Dockerfile
index e55d4a3ca..ec847f3c3 100644
--- a/dockerfiles/all-in-one/Dockerfile
+++ b/dockerfiles/all-in-one/Dockerfile
@@ -75,7 +75,10 @@ RUN dotnet publish AliasVault.Api/AliasVault.Api.csproj \
         -c Release -o /app/api --no-restore
 
 # Build Client (contains WASM which can be slow)
-RUN dotnet publish AliasVault.Client/AliasVault.Client.csproj \
+# Note: Must run build first before publish, to trigger index.html generation for correct fingerprinting
+RUN dotnet build AliasVault.Client/AliasVault.Client.csproj \
+        -c Release --no-restore && \
+    dotnet publish AliasVault.Client/AliasVault.Client.csproj \
         -c Release -o /app/client --no-restore
 
 # Build Admin