diff --git a/apps/rebreak-magic-win/src-tauri/Cargo.toml b/apps/rebreak-magic-win/src-tauri/Cargo.toml
index f3d064f..d4bf601 100644
--- a/apps/rebreak-magic-win/src-tauri/Cargo.toml
+++ b/apps/rebreak-magic-win/src-tauri/Cargo.toml
@@ -20,9 +20,17 @@ tauri = { version = "2", features = [] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
-keyring = { version = "3", features = ["windows-native", "apple-native"] }
 protection-core = { path = "protection-core" }
 
+# keyring plattform-spezifisch: `apple-native` würde auf Windows das macOS-only
+# security-framework ziehen und den Build brechen. Pro Target nur das passende
+# Backend (Windows-Build nutzt windows-native, Mac-cargo-check apple-native).
+[target.'cfg(windows)'.dependencies]
+keyring = { version = "3", features = ["windows-native"] }
+
+[target.'cfg(not(windows))'.dependencies]
+keyring = { version = "3", features = ["apple-native"] }
+
 [profile.release]
 strip = true
 lto = true