diff --git a/website/public/images/kb/administer/upgrading/gateway-upgrade-verify.png b/website/public/images/kb/administer/upgrading/gateway-upgrade-verify.png
new file mode 100644
index 000000000..20141c1f0
Binary files /dev/null and b/website/public/images/kb/administer/upgrading/gateway-upgrade-verify.png differ
diff --git a/website/src/app/kb/administer/upgrading/_page.tsx b/website/src/app/kb/administer/upgrading/_page.tsx
new file mode 100644
index 000000000..8f8abd30f
--- /dev/null
+++ b/website/src/app/kb/administer/upgrading/_page.tsx
@@ -0,0 +1,6 @@
+"use client";
+import Content from "./readme.mdx";
+
+export default function _Page() {
+  return <Content />;
+}
diff --git a/website/src/app/kb/administer/upgrading/page.tsx b/website/src/app/kb/administer/upgrading/page.tsx
index 648a9fd7f..f5246bcb7 100644
--- a/website/src/app/kb/administer/upgrading/page.tsx
+++ b/website/src/app/kb/administer/upgrading/page.tsx
@@ -1,4 +1,4 @@
-import Content from "./readme.mdx";
+import _Page from "./_page";
 import { Metadata } from "next";
 
 export const metadata: Metadata = {
@@ -7,5 +7,5 @@ export const metadata: Metadata = {
 };
 
 export default function Page() {
-  return <Content />;
+  return <_Page />;
 }
diff --git a/website/src/app/kb/administer/upgrading/readme.mdx b/website/src/app/kb/administer/upgrading/readme.mdx
index da2d5611e..f80669eeb 100644
--- a/website/src/app/kb/administer/upgrading/readme.mdx
+++ b/website/src/app/kb/administer/upgrading/readme.mdx
@@ -1,5 +1,6 @@
 import { HiCheck } from "react-icons/hi2";
 import { TabsItem, TabsGroup } from "@/components/DocsTabs";
+import Image from "next/image";
 
 # Upgrading Firezone
 
@@ -59,6 +60,28 @@ Gateway, and then restarts it using the newer image with the same configuration.
 curl -s https://raw.githubusercontent.com/firezone/firezone/main/scripts/gateway-docker-upgrade.sh | bash
 ```
 
+### Verification
+
+After running the upgrade, you can verify the Gateway is running the latest
+version by ensuring the sha256 hash of the pulled image matches the latest
+[artifact published on GitHub](https://github.com/firezone/firezone/pkgs/container/gateway/184806062?tag=latest):
+
+<Image
+  src="/images/kb/administer/upgrading/gateway-upgrade-verify.png"
+  width={500}
+  height={500}
+  className="mx-auto"
+  alt="Gateway upgrade verification"
+/>
+
+```bash
+# Get the sha256 hash of the your gateway image
+> docker inspect ghcr.io/firezone/gateway:1.0 --format='{{index .RepoDigests 0}}'
+
+# Ensure this hash matches the latest available image above
+ghcr.io/firezone/gateway@sha256:0516fa4a305fac10571238db2b7bf02e6adeda0fb5afc1fe7e8d0c4d0a93ebc6
+```
+
 </TabsItem>
 <TabsItem title="systemd">