diff --git a/app/routes/profile._index.tsx b/app/routes/profile._index.tsx
index 6889723..59f12ce 100644
--- a/app/routes/profile._index.tsx
+++ b/app/routes/profile._index.tsx
@@ -1,4 +1,5 @@
-import { MetaFunction } from "@remix-run/node";
+import { MetaFunction, redirect, type LoaderFunctionArgs } from "@remix-run/node";
+import { sessionStorage } from "~/sessions.server";
 import {
   BookmarkMinus,
   ChevronLeft,
@@ -33,6 +34,19 @@ interface MenuItemType {
   hasBorder?: boolean;
   image: React.ReactNode;
 }
+// Guard: the account hub requires login (sub-pages are already protected via
+// validateTokens; this covers the /profile index itself).
+export async function loader({ request }: LoaderFunctionArgs) {
+  const session = await sessionStorage.getSession(
+    request.headers.get("cookie")
+  );
+  const user = session.get("user");
+  if (!user?.access_token) {
+    throw redirect("/login");
+  }
+  return null;
+}
+
 export default function Profile() {
   const { user, theme: initialTheme } = useRootData();
   const [storeModalOpen, setStoreModalOpen] = useState(false);