diff --git a/CHANGELOG.md b/CHANGELOG.md
index c0c6583..36d613c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -71,6 +71,11 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); version
   the component kit. Sign in names the mail host above its title; a refused
   attempt is shown as a notice above the fields. `login` and `setup` are off
   the ratchet.
+- panel-redesign (design): the sign-in page before any administrator exists
+  is a drawn screen (`login-no-admin`): the heading *No administrator yet* and
+  the pointer to the one-time setup link, in the same column as the form. The
+  signed-out column is sized through `.sp-form`, not through `form` (owner,
+  2026-10-09).
 
 ### Changed
 
diff --git a/docs/assets/panel-redesign/evidence/login-no-admin.png b/docs/assets/panel-redesign/evidence/login-no-admin.png
new file mode 100644
index 0000000..d5837fe
Binary files /dev/null and b/docs/assets/panel-redesign/evidence/login-no-admin.png differ
diff --git a/internal/web/auth/handlers_test.go b/internal/web/auth/handlers_test.go
index 7bfa250..c8651c0 100644
--- a/internal/web/auth/handlers_test.go
+++ b/internal/web/auth/handlers_test.go
@@ -133,7 +133,7 @@ func TestLoginPointsAtSetupBeforeTheFirstAdministrator(t *testing.T) {
 		t.Fatalf("status = %d, want 200", rec.Code)
 	}
 	body := rec.Body.String()
-	if !strings.Contains(body, "No administrator has been created yet") {
+	if !strings.Contains(body, "No administrator yet") || !strings.Contains(body, "one-time setup link") {
 		t.Errorf("the login page does not point at the setup link:\n%s", body)
 	}
 	if strings.Contains(body, `name="password"`) {
diff --git a/internal/web/view/signin_test.go b/internal/web/view/signin_test.go
index 0104d2a..406a883 100644
--- a/internal/web/view/signin_test.go
+++ b/internal/web/view/signin_test.go
@@ -53,12 +53,11 @@ func TestLoginShowsAnErrorEscaped(t *testing.T) {
 
 func TestLoginWithoutAnAdministratorHasNoForm(t *testing.T) {
 	out := renderSignedOut(t, "login", NewLoginSetupHint("mail.example.org"))
-	if !strings.Contains(out, "No administrator has been created yet") {
+	if !strings.Contains(out, "No administrator yet") || !strings.Contains(out, "one-time setup link") {
 		t.Error("the setup hint is missing")
 	}
-	// The element stays (the signed-out layout centres the column through it) but
-	// nothing in it can be filled in or sent.
-	for _, bad := range []string{`action=`, `<input`, `<button`, `name="password"`, `name="username"`} {
+	// Nothing on it can be filled in or sent.
+	for _, bad := range []string{`<form`, `action=`, `<input`, `<button`, `name="password"`, `name="username"`} {
 		if strings.Contains(out, bad) {
 			t.Errorf("the hint page carries %q", bad)
 		}
diff --git a/internal/web/view/static/panel.css b/internal/web/view/static/panel.css
index e24c577..bc9c7bb 100644
--- a/internal/web/view/static/panel.css
+++ b/internal/web/view/static/panel.css
@@ -306,7 +306,7 @@ code { background: var(--sp-well); color: var(--sp-ink); border-radius: 3px; pad
 .sp-signin-brand img { width: 20rem; max-width: 100%; height: auto; }
 .sp-signin-brand p { font-family: var(--sp-mono); letter-spacing: .18em; font-size: var(--sp-fs-xs); color: var(--sp-on-brick); margin-top: 1.6rem; }
 .sp-signin-form { display: flex; flex-direction: column; justify-content: center; padding: 3rem; }
-.sp-signin-form form { width: 22rem; max-width: 100%; margin-inline: auto; }
+.sp-signin-form .sp-form { width: 22rem; max-width: 100%; margin-inline: auto; }
 .sp-foot { color: var(--sp-muted); font-size: var(--sp-fs-s); padding-block: 1.5rem 0; }
 .sp-foot a { color: inherit; text-decoration: underline; }
 .sp-signin-form .sp-foot { text-align: center; margin-top: 2.5rem; }
diff --git a/internal/web/view/templates/login.html b/internal/web/view/templates/login.html
index 5119fa4..b99de1d 100644
--- a/internal/web/view/templates/login.html
+++ b/internal/web/view/templates/login.html
@@ -4,15 +4,12 @@
      in as, so the form gives way to a pointer at the setup link. */}}
 {{define "content"}}
 {{if .SetupHint}}
-{{/* The signed-out layout sizes and centres its column through "form" alone, so
-     this state, which has no fields, keeps the element; it has no action and no
-     control and cannot be submitted. */}}
-<form class="sp-form">
+{{/* Mockup login-no-admin.html: the same column, not a form. */}}
+<div class="sp-form">
   {{if .Host}}<p>{{template "kicker" .Host}}</p>{{end}}
-  <h1 class="title is-3">Sign in</h1>
-  <p class="sp-muted">No administrator has been created yet. Open the one-time
-  setup link printed in the container log to get started.</p>
-</form>
+  <h1 class="title is-3">No administrator yet</h1>
+  <p class="sp-muted">Open the one-time setup link printed in the container log to create one.</p>
+</div>
 {{else}}
 <form class="sp-form" method="post" action="/login">
   {{if .Host}}<p>{{template "kicker" .Host}}</p>{{end}}