diff --git a/src/utils/auth.js b/src/utils/auth.js
index 8597407..e64a325 100644
--- a/src/utils/auth.js
+++ b/src/utils/auth.js
@@ -15,7 +15,8 @@ function setCookie(name, value, days = 30) {
   const date = new Date()
   date.setTime(date.getTime() + days * 24 * 60 * 60 * 1000)
   const expires = `expires=${date.toUTCString()}`
-  document.cookie = `${name}=${encodeURIComponent(value)};${expires};path=/;SameSite=Lax`
+  const secureFlag = window.location.protocol === 'https:' ? ';Secure' : ''
+  document.cookie = `${name}=${encodeURIComponent(value)};${expires};path=/;SameSite=Lax${secureFlag}`
 }
 
 /**