diff --git a/authelia/vault/authelia-secrets.yaml b/authelia/vault/authelia-secrets.yaml
index 70e8eb1..822b0f0 100644
--- a/authelia/vault/authelia-secrets.yaml
+++ b/authelia/vault/authelia-secrets.yaml
@@ -37,6 +37,11 @@ spec:
       remoteRef:
         key: cluster-infrastructure/authelia
         property: OIDC_JWKS_PRIVATE_KEY
+    # JWT HMAC key for identity validation (password reset)
+    - secretKey: identity_validation.reset_password.jwt.hmac.key
+      remoteRef:
+        key: cluster-infrastructure/authelia
+        property: JWT_HMAC_KEY
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret