diff --git a/apps/web/lib/env.ts b/apps/web/lib/env.ts
index 049ad6c..847dfe5 100644
--- a/apps/web/lib/env.ts
+++ b/apps/web/lib/env.ts
@@ -19,7 +19,13 @@ export const env = {
     return this.nodeEnv === "production";
   },
   sessionSecret:
-    process.env.SESSION_SECRET || "dev-only-insecure-change-me-0000000000000000",
+    (() => {
+      const val = process.env.SESSION_SECRET;
+      if (!val && process.env.NODE_ENV === "production") {
+        throw new Error("SESSION_SECRET must be set in production");
+      }
+      return val || "dev-only-insecure-change-me-0000000000000000";
+    })(),
   adminEmails: (process.env.ADMIN_EMAILS || "anthony@profullstack.com")
     .split(",")
     .map((e) => e.trim().toLowerCase())