diff --git a/main/views.py b/main/views.py
index f7c4cc2..7119ef1 100644
--- a/main/views.py
+++ b/main/views.py
@@ -70,7 +70,7 @@ def login(request):
     if request.method == "POST":
         if constant_time_compare(request.POST["password"], settings.PASSWORD):
             res = redirect("post")
-            res.set_cookie("password", request.POST["password"])
+            res.set_cookie("password", request.POST["password"], max_age=60*60*24*365) # 1 year
             return res
 
     # Returning 401 here causes `links` to always prompt for HTTP basic auth, which is annoying.
@@ -83,7 +83,7 @@ def post(request):
         return redirect("login")
 
     editing = request.GET.get("editing", None)
-    try: 
+    try:
         editing_thought = Thought.objects.get(uuid=editing)
         editing_thought.timezone_offset = - editing_thought.timezone_offset / 60
     except Thought.DoesNotExist: