diff --git a/backend/controller/auth/controller.go b/backend/controller/auth/controller.go
index e87f52d..96c2ed2 100644
--- a/backend/controller/auth/controller.go
+++ b/backend/controller/auth/controller.go
@@ -50,6 +50,7 @@ func (ctrl *Controller) LoginPost(c echo.Context) error {
 				Path:     "/",
 				MaxAge:   3600 * 24 * 2,
 				HttpOnly: true,
+				Secure:   true,
 			}
 			sess.Values["user"] = user.ID
 			sess.Save(c.Request(), c.Response())