diff --git a/packages/medusa/src/loaders/express.js b/packages/medusa/src/loaders/express.js
index 7dd22f674a..eca1b1038b 100644
--- a/packages/medusa/src/loaders/express.js
+++ b/packages/medusa/src/loaders/express.js
@@ -21,7 +21,7 @@ export default async ({ app }) => {
       activeDuration: 1000 * 60 * 5,
       cookie: {
         httpOnly: true,
-        secure: false,
+        secure: process.env.NODE_ENV === "production",
       },
     })
   )