diff --git a/apps/portal/src/app/router.tsx b/apps/portal/src/app/router.tsx
index 348b98685..5e2c539c5 100644
--- a/apps/portal/src/app/router.tsx
+++ b/apps/portal/src/app/router.tsx
@@ -69,9 +69,14 @@ export const router = createBrowserRouter([
   { path: "/signup", element: <SignupPage /> },
 
   // Where Fayda returns the applicant. Public by necessity — they have no
-  // account yet. It redeems the code and hands control back to /signup; the
-  // path must match the API's REDIRECT_URI, which is registered with Fayda.
+  // account yet. It redeems the code and hands control back to /signup.
+  //
+  // Two paths for one page: whichever is registered with Fayda has to match the
+  // API's FAYDA_REDIRECT_URI exactly, and the value being registered first is a
+  // bare /callback. The descriptive path is kept so the route still reads as
+  // part of signup once that can be changed.
   { path: "/signup/fayda/callback", element: <FaydaCallbackPage /> },
+  { path: "/callback", element: <FaydaCallbackPage /> },
 
   // Completes the forgot-password flow; the reset message links here. The
   // IAM package generates `/reset-password` links, `/set-password` is the