diff --git a/internal/web/service.go b/internal/web/service.go
index d73e2c0..ac1dca5 100644
--- a/internal/web/service.go
+++ b/internal/web/service.go
@@ -21,7 +21,7 @@ const (
 	CsrfFieldName     = "formtoken"
 )
 
-var CookieSecure = false
+var CookieSecure = true
 
 type ViewData struct {
 	Title       string