diff --git a/src/routes/admin/auth.ts b/src/routes/admin/auth.ts
index 295b0f5..161317f 100644
--- a/src/routes/admin/auth.ts
+++ b/src/routes/admin/auth.ts
@@ -158,7 +158,7 @@ export default async function authRoutes(fastify: FastifyInstance): Promise<void
     const result = await refreshAccessToken(refreshTokenRaw, request);
 
     if (result.type === 'error') {
-      reply.clearCookie('refresh_token', { path: '/api/admin' });
+      reply.clearCookie('refresh_token', { path: '/api/admin', httpOnly: true, secure: config.isProduction, sameSite: 'strict' });
       return error(reply, result.message, result.status);
     }
 
@@ -177,7 +177,7 @@ export default async function authRoutes(fastify: FastifyInstance): Promise<void
       await logout(refreshTokenRaw);
     }
 
-    reply.clearCookie('refresh_token', { path: '/api/admin' });
+    reply.clearCookie('refresh_token', { path: '/api/admin', httpOnly: true, secure: config.isProduction, sameSite: 'strict' });
     return success(reply, null, 200, 'Odhlášení úspěšné');
   });