diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 5af59b9a..d18f164c 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -77,3 +77,32 @@ jobs:
         run: |
           . venv/bin/activate
           make check-typing
+  build-onefile:
+    name: Build onefile
+    runs-on: windows-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Create virtual environment
+        run: |
+          python -m venv venv
+          .\venv\Scripts\Activate.ps1
+          .\venv\Scripts\pip install pip
+          .\venv\Scripts\pip install flit
+          .\venv\Scripts\flit install --symlink
+      - name: Create Windows version info file
+        run: |
+          .\venv\Scripts\Activate.ps1
+          create-version-file `
+            --outfile .\ci-scripts\windows\pyinstaller\file_version_info.txt `
+            --version "$(Get-Content .\pynitrokey\VERSION)" `
+            .\ci-scripts\windows\pyinstaller\file_version_info_metadata.yaml
+      - name: Build onefile
+        run: |
+          .\venv\Scripts\Activate.ps1
+          pyinstaller ci-scripts/windows/pyinstaller/pynitrokey-onefile.spec
+      - name: Archive production artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist\nitropy.exe