diff --git a/budgetkey_api/flask_app.py b/budgetkey_api/flask_app.py
index 1497bb1..f38f30b 100644
--- a/budgetkey_api/flask_app.py
+++ b/budgetkey_api/flask_app.py
@@ -42,6 +42,8 @@ def create_flask_app(session_file_dir=None, cache_dir=None, services=None):
 
     CORS(app, supports_credentials=True)
 
+    app.secret_key = os.environ['SECRET_KEY']
+
     config = {
         "CACHE_TYPE": "FileSystemCache",  # Flask-Caching related configs
         "CACHE_DEFAULT_TIMEOUT": 600,
diff --git a/tests/sample.env b/tests/sample.env
index cd992d6..e90a014 100644
--- a/tests/sample.env
+++ b/tests/sample.env
@@ -3,3 +3,4 @@ PUBLIC_KEY=PUBLIC_KEY
 DATABASE_PRIVATE_URL=sqlite:///tests/temp/db.sqlite3
 DATABASE_READONLY_URL=sqlite:///tests/temp/db.sqlite3
 EXTERNAL_ADDRESS=next.obudget.org
+SECRET_KEY=SECRET_KEY