diff --git a/src/pages/get-started/install/pfsense.mdx b/src/pages/get-started/install/pfsense.mdx
index c01793e6..007cd403 100644
--- a/src/pages/get-started/install/pfsense.mdx
+++ b/src/pages/get-started/install/pfsense.mdx
@@ -145,6 +145,33 @@ By default, pfSense uses automatic outbound NAT which randomizes source ports. T
     -   Run `netbird service restart` on the device.
     -   Run `netbird status -d` to verify the connection.
 
+## Updating
+
+To upgrade an existing install, fetch the latest packages and re-run `pkg add -f` over the current ones. There is no need to `pkg delete` first: the `-f` flag upgrades the packages in place.
+
+1. **Download the latest packages**
+
+   From the [latest pfSense NetBird release](https://github.com/netbirdio/pfsense-netbird/releases/latest), fetch both `.pkg` files for your architecture, replacing the tag, version, and architecture values with those from the release page (as in [Installation](#installation)):
+   ```sh
+   fetch https://github.com/netbirdio/pfsense-netbird/releases/download/<RELEASE_TAG>/netbird-<VERSION>-<ARCH>.pkg
+   fetch https://github.com/netbirdio/pfsense-netbird/releases/download/<RELEASE_TAG>/pfSense-pkg-NetBird-<VERSION>-<ARCH>.pkg
+   ```
+
+2. **Upgrade both packages in place**
+
+   Using the filenames you downloaded, run `pkg add -f` on both over the existing install:
+   ```sh
+   pkg add -f netbird-<VERSION>-<ARCH>.pkg
+   pkg add -f pfSense-pkg-NetBird-<VERSION>-<ARCH>.pkg
+   ```
+
+3. **Restart and verify**
+
+   ```sh
+   netbird service restart
+   netbird status -d
+   ```
+
 ## Uninstallation
 
 From a shell on your pfSense system, run: