diff --git a/server/http_auth.go b/server/http_auth.go
index bd12e8349..160bd2ebd 100644
--- a/server/http_auth.go
+++ b/server/http_auth.go
@@ -114,6 +114,7 @@ func loginHandler(auth auth.Auth) http.HandlerFunc {
 			Path:     "/",
 			HttpOnly: true,
 			Expires:  time.Now().Add(lifetime),
+			SameSite: http.SameSiteStrictMode,
 		})
 	}
 }