diff --git a/apps/web/src/middleware.ts b/apps/web/src/middleware.ts
index c1ce3c5..abf8755 100644
--- a/apps/web/src/middleware.ts
+++ b/apps/web/src/middleware.ts
@@ -4,7 +4,10 @@ import type { NextRequest } from 'next/server';
 export function middleware(request: NextRequest) {
   // Protect /dashboard routes
   if (request.nextUrl.pathname.startsWith('/dashboard')) {
-    const sessionToken = request.cookies.get('better-auth.session_token');
+    // Check for session token - better-auth uses __Secure- prefix for HTTPS cookies
+    const sessionToken =
+      request.cookies.get('__Secure-better-auth.session_token') ||
+      request.cookies.get('better-auth.session_token');
     if (!sessionToken) {
       return NextResponse.redirect(new URL('/sign-in', request.url));
     }