diff --git a/roles/config_generate/config_generate-drupal8/tasks/settings.yml b/roles/config_generate/config_generate-drupal8/tasks/settings.yml
index 6f698ba5..79e0ad5e 100644
--- a/roles/config_generate/config_generate-drupal8/tasks/settings.yml
+++ b/roles/config_generate/config_generate-drupal8/tasks/settings.yml
@@ -18,6 +18,10 @@
     mode: 0775
   become: "{{ false if www_user == deploy_user else true }}"
 
+- name: Generate or retrieve hash salt value.
+  ansible.builtin.set_fact:
+    _drupal_hash_salt: "{{ lookup('ansible.builtin.password', _ce_deploy_data_dir + '/' + project_name  + '_' + build_type + '/drupal/hash_salt length=74 chars=ascii_letters,digits') }}"
+
 - name: Generates settings.php file.
   ansible.builtin.template:
     src: "{{ item }}"
diff --git a/roles/config_generate/config_generate-drupal8/templates/settings.php.j2 b/roles/config_generate/config_generate-drupal8/templates/settings.php.j2
index e5d43204..895f654f 100644
--- a/roles/config_generate/config_generate-drupal8/templates/settings.php.j2
+++ b/roles/config_generate/config_generate-drupal8/templates/settings.php.j2
@@ -23,3 +23,5 @@ $settings['file_public_path'] = '{{ build_public_file_path }}';
 $config_directories['sync'] = '{{ build_config_sync_directory }}';
 // Drupal 8.8
 $settings['config_sync_directory'] = '{{ build_config_sync_directory }}';
+
+$settings['hash_salt'] = '{{ _drupal_hash_salt }}';