diff --git a/src/lib.rs b/src/lib.rs
index acdb7c6..20ba7a1 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -92,6 +92,7 @@
 //!     cookies.add_private(
 //!         Cookie::build(("token", token.access_token().to_string()))
 //!             .same_site(SameSite::Lax)
+//!             .secure(true)
 //!             .build()
 //!     );
 //!     Redirect::to("/")
@@ -699,6 +700,7 @@ impl<K: 'static> OAuth2<K> {
         cookies.add_private(
             Cookie::build((STATE_COOKIE_NAME, state))
                 .same_site(SameSite::Lax)
+                .secure(true)
                 .build(),
         );
         Ok(Redirect::to(uri))