diff --git a/backend/README.md b/backend/README.md
index 695aaea..3b9c0ea 100644
--- a/backend/README.md
+++ b/backend/README.md
@@ -97,7 +97,9 @@ bootstrap-time `unpkg.com` URL is the single authoritative version pin (D-10).
 ## Environment variables
 
 `backend/.env` is gitignored; `backend/.env.example` is committed and lists the
-keys consumed by `cmd/web` and `cmd/worker`.
+keys consumed by `cmd/web` and `cmd/worker`. Local Just recipes load
+`backend/.env` automatically, so `just dev` will pick up provider credentials
+such as `GOOGLE_CLIENT_ID` and `APPLE_CLIENT_ID`.
 
 | Variable                 | Description                                                              | Default                                                          |
 | ------------------------ | ------------------------------------------------------------------------ | ---------------------------------------------------------------- |
@@ -130,7 +132,7 @@ Every command in this table is a recipe in `backend/justfile`.
 | `just migrate up` / `migrate down` / `migrate status` | Applies / reverts / inspects goose migrations against `DATABASE_URL`     | After `just db-up`, or any time you change `migrations/` |
 | `just generate`                                 | One-shot: `templ generate`, `sqlc generate`, Tailwind compile to `static/tailwind.css` | After editing `.templ`, query SQL, or `tailwind.input.css` |
 | `just styles-watch`                             | Tailwind standalone CLI in `--watch` mode                                    | In a second terminal alongside `just dev` (D-14)         |
-| `just dev`                                      | Brings up Postgres, runs `just generate`, then runs `air` for Go live-reload on `:8080` | Main dev loop, terminal 1                                |
+| `just dev`                                      | Loads `backend/.env`, brings up Postgres, runs `just generate`, then runs `air` for Go live-reload on `:8080` | Main dev loop, terminal 1                                |
 | `just test`                                     | `templ generate` then `go test ./...`                                        | Before committing                                        |
 | `just lint`                                     | `go vet ./...` and `gofmt -l` check                                          | Before committing                                        |
 | `just build`                                    | Generates assets, then builds `bin/web` and `bin/worker`                     | Producing release binaries locally                       |
diff --git a/backend/justfile b/backend/justfile
index acfa9a7..43fda88 100644
--- a/backend/justfile
+++ b/backend/justfile
@@ -12,6 +12,7 @@
 # every .go save is wasteful, and the two concerns are independent (CONTEXT D-14).
 
 set shell := ["bash", "-cu"]
+set dotenv-load := true
 
 # --- Pinned versions ------------------------------------------------------------------------
 # Runtime Go modules are pinned in go.mod (chi v5.2.5, templ v0.3.1020, pgx/v5 v5.9.2,
@@ -117,7 +118,6 @@ styles-watch:
 dev: db-up
     just generate
     DATABASE_URL='{{ database_url }}' \
-    SESSION_SECRET=191affeb1624de1f0e07bd5cfab14cd655510a24f7e673bd784ea56847890caf \
     S3_ENDPOINT='{{ s3_endpoint }}' \
     S3_BUCKET='{{ s3_bucket }}' \
     S3_REGION='{{ s3_region }}' \