diff --git a/backend/main.py b/backend/main.py
index ab1ba08..c1aee66 100644
--- a/backend/main.py
+++ b/backend/main.py
@@ -406,7 +406,7 @@ async def serve_media(path: str, request: _Request):
         raise _HE(404, "Nicht gefunden.")
     return _media_response(filepath)
 
-APP_VER = "947"  # muss mit APP_VER in app.js übereinstimmen
+APP_VER = "948"  # muss mit APP_VER in app.js übereinstimmen
 
 @app.get("/.well-known/assetlinks.json")
 async def assetlinks():
diff --git a/backend/static/js/app.js b/backend/static/js/app.js
index 2948711..a2302f4 100644
--- a/backend/static/js/app.js
+++ b/backend/static/js/app.js
@@ -3,7 +3,7 @@
    Router, State-Management, Navigation, Initialisierung.
    ============================================================ */
 
-const APP_VER     = '947'; // ← bei jedem Deploy mit Frontend-Änderungen erhöhen
+const APP_VER     = '948'; // ← bei jedem Deploy mit Frontend-Änderungen erhöhen
 const APP_VERSION = '1.5.1'; // ← semantische Version, wird bei make release gesetzt
 const IS_STAGING  = location.hostname === 'staging.banyaro.app';
 // Cache-Bust-Parameter nach Update-Reload sofort entfernen
diff --git a/backend/static/js/pages/routes.js b/backend/static/js/pages/routes.js
index 9b6c37b..80cffa9 100644
--- a/backend/static/js/pages/routes.js
+++ b/backend/static/js/pages/routes.js
@@ -671,21 +671,20 @@ window.Page_routes = (() => {
         <button id="rk-dim-unlock-btn"
                 style="background:none;border:none;cursor:pointer;outline:none;
                        display:flex;flex-direction:column;align-items:center;gap:0;
-                       margin-top:36px;padding:0;-webkit-tap-highlight-color:transparent;
+                       margin-top:36px;padding:0 16px 16px;-webkit-tap-highlight-color:transparent;
                        touch-action:none;user-select:none">
-          <div style="position:relative;width:56px;height:56px">
-            <svg width="56" height="56" viewBox="0 0 56 56">
-              <circle cx="28" cy="28" r="24" fill="none" stroke="rgba(255,255,255,.12)" stroke-width="2.5"/>
-              <circle id="rk-dim-prog" cx="28" cy="28" r="24" fill="none" stroke="rgba(255,255,255,.7)" stroke-width="2.5"
-                stroke-dasharray="150.8" stroke-dashoffset="150.8" stroke-linecap="round"
-                transform="rotate(-90 28 28)" style="transition:none"/>
-            </svg>
-            <svg style="position:absolute;inset:0;margin:auto;width:24px;height:24px;opacity:.55"
-                 viewBox="0 0 256 256" aria-hidden="true">
-              <use href="/icons/phosphor.svg#fingerprint"></use>
-            </svg>
-          </div>
-          <div style="font-size:11px;opacity:.3;margin-top:8px">2 Sek. halten</div>
+          <svg width="56" height="56" viewBox="0 0 56 56">
+            <circle cx="28" cy="28" r="24" fill="none" stroke="rgba(255,255,255,.12)" stroke-width="2.5"/>
+            <circle id="rk-dim-prog" cx="28" cy="28" r="24" fill="none" stroke="rgba(255,255,255,.7)" stroke-width="2.5"
+              stroke-dasharray="150.8" stroke-dashoffset="150.8" stroke-linecap="round"
+              transform="rotate(-90 28 28)" style="transition:none"/>
+          </svg>
+          <!-- Fingerabdruck unter dem Ring, inline path (kein <use> wegen iOS-Bug) -->
+          <svg viewBox="0 0 256 256" width="28" height="28" fill="white"
+               style="margin-top:12px;opacity:0.5">
+            <path d="M126.42,24C70.73,24.85,25.21,70.09,24,125.81a103.53,103.53,0,0,0,13.52,53.54,4,4,0,0,0,7.1-.3,119.35,119.35,0,0,0,11.37-51A71.77,71.77,0,0,1,83,71.83a8,8,0,1,1,9.86,12.61A55.82,55.82,0,0,0,72,128.07a135.28,135.28,0,0,1-18.45,68.35,4,4,0,0,0,.61,4.85c2,2,4.09,4,6.25,5.82a4,4,0,0,0,6-1A151.18,151.18,0,0,0,85,158.49a8,8,0,1,1,15.68,3.19,167.33,167.33,0,0,1-21.07,53.64,4,4,0,0,0,1.6,5.63c2.47,1.25,5,2.41,7.57,3.47a4,4,0,0,0,5-1.61A183,183,0,0,0,120,128.28a8.16,8.16,0,0,1,7.44-8.21,8,8,0,0,1,8.56,8,198.94,198.94,0,0,1-25.21,97.16,4,4,0,0,0,2.95,5.92q4.55.63,9.21.86a4,4,0,0,0,3.67-2.1A214.88,214.88,0,0,0,152,128.8c.05-13.25-10.3-24.49-23.54-24.74A24,24,0,0,0,104,128a8.1,8.1,0,0,1-7.29,8,8,8,0,0,1-8.71-8,40,40,0,0,1,40.42-40c22,.23,39.68,19.17,39.57,41.16a231.37,231.37,0,0,1-20.52,94.57,4,4,0,0,0,4.62,5.51,103.49,103.49,0,0,0,10.26-3,4,4,0,0,0,2.35-2.22,243.76,243.76,0,0,0,11.48-34,8,8,0,1,1,15.5,4q-1.12,4.37-2.4,8.7a4,4,0,0,0,6.46,4.17A104,104,0,0,0,126.42,24ZM198,161.08a8,8,0,0,1-7.92,7,8.39,8.39,0,0,1-1-.06,8,8,0,0,1-6.95-8.93,252.57,252.57,0,0,0,1.92-31,56.08,56.08,0,0,0-56-56,56.78,56.78,0,0,0-7,.43,8,8,0,0,1-2-15.89,72.1,72.1,0,0,1,81,71.49A266.93,266.93,0,0,1,198,161.08Z"/>
+          </svg>
+          <div style="font-size:11px;opacity:.3;margin-top:6px">2 Sek. halten</div>
         </button>
       </div>
     `;
@@ -722,7 +721,8 @@ window.Page_routes = (() => {
       const banner = document.createElement('div');
       banner.style.cssText = 'position:absolute;top:0;left:0;right:0;z-index:960;' +
         'background:rgba(30,30,30,0.92);color:#fff;font-size:13px;line-height:1.4;' +
-        'padding:10px 14px;display:flex;align-items:flex-start;gap:10px;' +
+        'padding:max(env(safe-area-inset-top,10px),10px) 14px 10px;' +
+        'display:flex;align-items:flex-start;gap:10px;' +
         'border-bottom:1px solid rgba(255,255,255,0.1)';
       banner.innerHTML = `
         <svg style="width:18px;height:18px;flex-shrink:0;margin-top:1px;color:#f59e0b" aria-hidden="true">
diff --git a/backend/static/sw.js b/backend/static/sw.js
index c808da1..0242bac 100644
--- a/backend/static/sw.js
+++ b/backend/static/sw.js
@@ -3,7 +3,7 @@
    Offline-Cache + Push Notifications + Tile-Cache
    ============================================================ */
 
-const CACHE_VERSION = 'by-v947';
+const CACHE_VERSION = 'by-v948';
 const CACHE_STATIC  = `${CACHE_VERSION}-static`;
 const CACHE_TILES   = 'ban-yaro-tiles-v1';  // bleibt über SW-Updates erhalten
 const CACHE_API     = 'ban-yaro-api-v1';    // API-Response-Cache