diff --git a/CHANGELOG.md b/CHANGELOG.md
index 298c7e041e..2c5767798a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@
 - fix: improve import/export documentation
 - fix: update helmet config
 - fix: Heroku Postgres add-on version change (#631)
+- fix: Add option via env for ADMIN_AUTHENTICATION
 
 ## 3.5.4
 
diff --git a/lib/options.js b/lib/options.js
index fef5dcb0c4..d96a028c72 100644
--- a/lib/options.js
+++ b/lib/options.js
@@ -45,7 +45,7 @@ function defaultOptions() {
         publicFolder,
         enableRequestLogger: false,
         sessionAge: THIRTY_DAYS,
-        adminAuthentication: 'unsecure',
+        adminAuthentication: process.env.ADMIN_AUTHENTICATION || 'unsecure',
         ui: {},
         importFile: undefined,
         dropBeforeImport: false,