diff --git a/README.md b/README.md
index aba59e45..58256694 100644
--- a/README.md
+++ b/README.md
@@ -151,6 +151,11 @@ Troubleshooting/FAQ
 Changelog
 ---
 
+### 6.3 - unreleased
+
+* Bluesky:
+  * Normalize handles to lower case, remove leading `@` ([bridgy#1667](https://github.com/snarfed/bridgy/issues/1667)).
+
 ### 6.2 - 2023-09-15
 
 Miscellaneous changes in `webutil`.
diff --git a/oauth_dropins/bluesky.py b/oauth_dropins/bluesky.py
index 6d59fac1..99ef8f8d 100644
--- a/oauth_dropins/bluesky.py
+++ b/oauth_dropins/bluesky.py
@@ -86,7 +86,7 @@ class Callback(views.Callback):
   OAuth callback stub.
   """
   def dispatch_request(self):
-    handle = request.values['username'].strip()
+    handle = request.values['username'].strip().lower().removeprefix('@')
     password = request.values['password'].strip()
     state = request.values.get('state')
 
diff --git a/oauth_dropins/webutil b/oauth_dropins/webutil
index 09209081..bd4d68c8 160000
--- a/oauth_dropins/webutil
+++ b/oauth_dropins/webutil
@@ -1 +1 @@
-Subproject commit 0920908117867dd85438dfab15c7e6006739ba72
+Subproject commit bd4d68c8e92a329ae70285de5896c879c4c39168