diff --git a/lnbits/settings.py b/lnbits/settings.py
index 94ba5dda9..cc2a4d2e8 100644
--- a/lnbits/settings.py
+++ b/lnbits/settings.py
@@ -1007,9 +1007,7 @@ class EnvSettings(LNbitsSettings):
     debug_database: bool = Field(default=False)
     bundle_assets: bool = Field(default=True)
     # When enabled, auth cookies require HTTPS and SSO will reject insecure HTTP.
-    # Keep disabled by default so local HTTP installs continue to work unless
-    # operators explicitly opt into HTTPS-only auth cookies.
-    auth_https_only: bool = Field(default=False)
+    auth_https_only: bool = Field(default=True)
     host: str = Field(default="127.0.0.1")
     port: int = Field(default=5000, gt=0)
     forwarded_allow_ips: str = Field(default="*")