diff --git a/setup/arch-autoinstall.sh b/setup/arch-autoinstall.sh
index eb44559..70fa9c3 100644
--- a/setup/arch-autoinstall.sh
+++ b/setup/arch-autoinstall.sh
@@ -1,6 +1,23 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+############################################
+# LOGGING
+############################################
+LOGFILE="$HOME/arch-autoinstall.log"
+
+# Timestamped header
+{
+    echo
+    echo "############################################"
+    echo " Arch Auto-Install Log - Started $(date)"
+    echo "############################################"
+    echo
+} >> "$LOGFILE"
+
+# Redirect ALL output (stdout & stderr) to both screen AND log
+exec > >(tee -a "$LOGFILE") 2>&1
+
 ############################################
 # SAFETY WARNING
 ############################################
@@ -193,7 +210,6 @@ if [[ "$FIDO_USER" == "YES" ]]; then
     sudo -u "$USERNAME" pamu2fcfg -u "$USERNAME" > /home/$USERNAME/.config/Yubico/u2f_keys
     chown "$USERNAME":"$USERNAME" /home/$USERNAME/.config/Yubico/u2f_keys
 
-    # PAM: system-local-login affects TTY + display manager logins
     echo "auth required pam_u2f.so" >> /etc/pam.d/system-local-login
 fi
 
@@ -203,4 +219,5 @@ EOF
 # DONE
 ############################################
 echo "Installation complete! You can now unmount and reboot."
+echo "Log saved to: $LOGFILE"