diff --git a/lib/devise/hooks/rememberable.rb b/lib/devise/hooks/rememberable.rb
index 15c7181..eeeafee 100644
--- a/lib/devise/hooks/rememberable.rb
+++ b/lib/devise/hooks/rememberable.rb
@@ -8,19 +8,20 @@ module Devise
       def success!(resource)
         super

         if succeeded? && resource.respond_to?(:remember_me!) && remember_me?
           resource.remember_me!(extend_remember_period?)

           configuration = {
             :value => resource.class.serialize_into_cookie(resource),
             :expires => resource.remember_expires_at,
-            :path => "/"
+            :path => "/",
+            :httponly => true
           }

           configuration[:domain] = resource.cookie_domain if resource.cookie_domain?
           cookies.signed["remember_#{scope}_token"] = configuration
         end
       end