diff --git a/scripts/install/client.sh b/scripts/install/client.sh
index 74e8bb9..426ad9d 100755
--- a/scripts/install/client.sh
+++ b/scripts/install/client.sh
@@ -307,6 +307,9 @@ run_as_user env TMPDIR="$TMPDIR" bash -c "cd '$SRC/client' && cargo clean && car
 log "5. Installing launchable client binaries"
 sudo install -Dm755 "$SRC/target/release/lesavka-client" /usr/local/bin/lesavka-client
 sudo ln -sf /usr/local/bin/lesavka-client /usr/local/bin/lesavka
+sudo install -d -m 0755 -o "$ORIG_USER" -g "$ORIG_USER" "$USER_HOME/.local/bin"
+sudo ln -sf /usr/local/bin/lesavka-client "$USER_HOME/.local/bin/lesavka-client"
+sudo chown -h "$ORIG_USER":"$ORIG_USER" "$USER_HOME/.local/bin/lesavka-client"
 install_client_pki_bundle
 sudo install -d -m 0755 -o "$ORIG_USER" -g "$ORIG_USER" "$CLIENT_CAPTURE_DIR"
 echo "   ↪ capture folder: $CLIENT_CAPTURE_DIR"
@@ -339,6 +342,7 @@ if [[ -n ${INSTALLED_VERSION:-} ]]; then
 fi
 echo "   Binary: /usr/local/bin/lesavka-client"
 echo "   Launch alias: /usr/local/bin/lesavka"
+echo "   User PATH alias: $USER_HOME/.local/bin/lesavka-client"
 echo "   Desktop entry: /usr/share/applications/lesavka.desktop"
 echo "   Build source: $SRC/target/release/lesavka-client"
 echo "   TLS identity: $CLIENT_PKI_DIR"
diff --git a/testing/tests/client_install_script_contract.rs b/testing/tests/client_install_script_contract.rs
index 4f7d06f..572e848 100644
--- a/testing/tests/client_install_script_contract.rs
+++ b/testing/tests/client_install_script_contract.rs
@@ -24,6 +24,8 @@ fn client_install_accepts_server_generated_tls_bundle() {
         "HTTPS/mTLS relay connections will not work until this bundle is installed",
         "TLS identity:",
         "Captures:",
+        "$USER_HOME/.local/bin/lesavka-client",
+        "User PATH alias:",
     ] {
         assert!(
             CLIENT_INSTALL.contains(expected),