diff --git a/drush/drush.yml b/drush/drush.yml
index 94ecf9183f..071906dc5c 100644
--- a/drush/drush.yml
+++ b/drush/drush.yml
@@ -38,6 +38,9 @@ command:
         # Use common tables by default.
         structure-tables-key: common
         skip-tables-key: common
+    sanitize:
+      options:
+        sanitize-password: '${env.APP_SECRET}'
   site:
     install:
       options: