diff --git a/public/appupdate.js b/public/appupdate.js
index b2a5dbe..e5c386a 100644
--- a/public/appupdate.js
+++ b/public/appupdate.js
@@ -217,9 +217,21 @@ const buildWindowsInstallCommand = (app, installerPath) => ({
   ]
 })
 
+const getSudoPromptName = (app) => {
+  const fallback = 'Farm Control'
+  const rawName = String(app.getName?.() || fallback)
+  const sanitized = rawName
+    .replace(/[^a-z0-9 ]/gi, ' ')
+    .replace(/\s+/g, ' ')
+    .trim()
+    .slice(0, 70)
+
+  return sanitized || fallback
+}
+
 const launchMacInstaller = (app, installerPath, webContents) => {
   const installScript = buildMacInstallScript(app, installerPath)
-  const promptName = app.getName() || 'Farm Control'
+  const promptName = getSudoPromptName(app)
 
   console.log('[app-update] launching macOS installer:', {
     installerPath,