diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index d5ce4587..b959910e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -22,6 +22,8 @@ jobs:
       - name: Build
         working-directory: frontend
         run: npm run build
+        env:
+          NEXT_PUBLIC_WEB3FORMS_ACCESS_KEY: ${{ secrets['WEB3FORMS_ACCESS_KEY'] }}
 
       - name: Deploy to GitHub Pages
         uses: peaceiris/actions-gh-pages@v4
diff --git a/frontend/dockerfile b/frontend/dockerfile
index 3aad26db..08eea200 100644
--- a/frontend/dockerfile
+++ b/frontend/dockerfile
@@ -47,6 +47,11 @@ ENV NEXT_TELEMETRY_DISABLED=1
 ARG NEXT_PUBLIC_MAINTENANCE_MODE=false
 ENV NEXT_PUBLIC_MAINTENANCE_MODE=$NEXT_PUBLIC_MAINTENANCE_MODE
 
+# Web3Forms access key for the contact form. Inlined at build time, so pass
+# with --build-arg NEXT_PUBLIC_WEB3FORMS_ACCESS_KEY=...
+ARG NEXT_PUBLIC_WEB3FORMS_ACCESS_KEY
+ENV NEXT_PUBLIC_WEB3FORMS_ACCESS_KEY=$NEXT_PUBLIC_WEB3FORMS_ACCESS_KEY
+
 # Build Next.js application
 RUN --mount=type=cache,target=/app/.next/cache \
     npm run build;