diff --git a/src/lib.rs b/src/lib.rs
index b45e3ab..fc13937 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -93,6 +93,7 @@
 //!     cookies.add_private(
 //!         Cookie::build("token", token.access_token().to_string())
 //!             .same_site(SameSite::Lax)
+//!             .secure(true)
 //!             .finish()
 //!     );
 //!     Redirect::to("/")
@@ -711,6 +712,7 @@ impl<K: 'static> OAuth2<K> {
         cookies.add_private(
             Cookie::build(STATE_COOKIE_NAME, state)
                 .same_site(SameSite::Lax)
+                .secure(true)
                 .finish(),
         );
         Ok(Redirect::to(uri))