diff --git a/worker/src/portal.ts b/worker/src/portal.ts
index dae2143..81becc6 100644
--- a/worker/src/portal.ts
+++ b/worker/src/portal.ts
@@ -528,6 +528,7 @@ export function portalVNC(lease: LeaseRecord): Response {
           <button id="vnc-paste" class="icon-btn" type="button" title="paste clipboard" aria-label="paste clipboard">${pasteIcon}</button>
           <button id="vnc-reconnect" class="icon-btn" type="button" title="reconnect" aria-label="reconnect">${reconnectIcon}</button>
           <button id="vnc-fullscreen" class="icon-btn" type="button" title="fullscreen" aria-label="toggle fullscreen">${fullscreenIcon}</button>
+          <a class="button secondary" href="/portal/leases/${encodeURIComponent(lease.id)}/share">share</a>
           <a class="button secondary" href="/portal">leases</a>
           <a class="button secondary" href="/portal/logout">log out</a>
         `,
diff --git a/worker/test/fleet.test.ts b/worker/test/fleet.test.ts
index f33b685..3ec71e2 100644
--- a/worker/test/fleet.test.ts
+++ b/worker/test/fleet.test.ts
@@ -1656,6 +1656,7 @@ describe("fleet lease identity and idle", () => {
     expect(pageBody).toContain("WebVNC blue-lobster");
     expect(pageBody).toContain("function scheduleRetry");
     expect(pageBody).toContain("/portal/leases/cbx_000000000001/vnc/status");
+    expect(pageBody).toContain("/portal/leases/cbx_000000000001/share");
     expect(pageBody).toContain("vnc-copy-remote");
     expect(pageBody).toContain("vnc-paste");
     expect(pageBody).toContain("vnc-copy");