diff --git a/app/bundesdata_app/settings.py b/app/bundesdata_app/settings.py
index 33a6009..c288aa3 100755
--- a/app/bundesdata_app/settings.py
+++ b/app/bundesdata_app/settings.py
@@ -26,6 +26,9 @@ SECRET_KEY = os.environ.get('SECRET_KEY') or 'hard to guess string'
 
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = os.environ.get('DEBUG') or False
+CSRF_COOKIE_SECURE = True
+SESSION_COOKIE_SECURE = True
+
 
 # CHANGE the hosts according to your settings.
 ALLOWED_HOSTS = ["127.0.0.1", "localhost", "192.168.0.14", "bundesdata.sporada.eu"]