diff --git a/debian/templates/koha-conf-site.xml.in b/debian/templates/koha-conf-site.xml.in
index 20d217222d9..2e66535c005 100644
--- a/debian/templates/koha-conf-site.xml.in
+++ b/debian/templates/koha-conf-site.xml.in
@@ -397,6 +397,9 @@ __END_SRU_PUBLICSERVER__
  <!-- This is the bcrypt settings used to generated anonymized content -->
  <bcrypt_settings>__BCRYPT_SETTINGS__</bcrypt_settings>
 
+ <!-- Encryption key for crypted password or sensitive data -->
+ <encryption_key>__ENCRYPTION_KEY__</encryption_key>
+
  <!-- flag for development purposes
       dev_install is used to adjust some paths specific to dev installations
       strict_sql_modes should not be used in a production environment
diff --git a/etc/koha-conf.xml b/etc/koha-conf.xml
index 2c95e2c5eb4..6c2c1fe9231 100644
--- a/etc/koha-conf.xml
+++ b/etc/koha-conf.xml
@@ -211,9 +211,12 @@
       server. e.g. Antarctica/South_Pole -->
  <timezone></timezone>
 
- <!-- This is the bcryt settings used to generated anonymized content -->
+ <!-- This is the bcrypt settings used to generated anonymized content -->
  <bcrypt_settings>__BCRYPT_SETTINGS__</bcrypt_settings>
 
+ <!-- Encryption key for crypted password or sensitive data -->
+ <encryption_key>__ENCRYPTION_KEY__</encryption_key>
+
  <!-- flag for development purposes
       dev_install is used to adjust some paths specific to dev installations
       strict_sql_modes should not be used in a production environment
diff --git a/t/Koha/Config.t b/t/Koha/Config.t
index 60df1945462..dbee1529be4 100755
--- a/t/Koha/Config.t
+++ b/t/Koha/Config.t
@@ -218,6 +218,7 @@ subtest 'read_from_file() tests' => sub {
             },
             'timezone' => '',
             'bcrypt_settings' => '__BCRYPT_SETTINGS__',
+            'encryption_key' => '__ENCRYPTION_KEY__',
             'dev_install' => '0',
             'strict_sql_modes' => '0',
             'plugin_repos' => '',
diff --git a/t/data/koha-conf.xml b/t/data/koha-conf.xml
index ae5faf6feff..5a5d5c3ba06 100644
--- a/t/data/koha-conf.xml
+++ b/t/data/koha-conf.xml
@@ -216,9 +216,12 @@
       server. e.g. Antarctica/South_Pole -->
  <timezone></timezone>
 
- <!-- This is the bcryt settings used to generated anonymized content -->
+ <!-- This is the bcrypt settings used to generated anonymized content -->
  <bcrypt_settings>__BCRYPT_SETTINGS__</bcrypt_settings>
 
+ <!-- Encryption key for crypted password or sensitive data -->
+ <encryption_key>__ENCRYPTION_KEY__</encryption_key>
+
  <!-- flag for development purposes
       dev_install is used to adjust some paths specific to dev installations
       strict_sql_modes should not be used in a production environment