diff --git a/REFERENCE.md b/REFERENCE.md
index 3b291ca179..b5e51d03a3 100644
--- a/REFERENCE.md
+++ b/REFERENCE.md
@@ -973,6 +973,14 @@ Set timezone for the PostgreSQL instance
 
 Default value: $postgresql::params::timezone
 
+##### `password_encryption`
+
+Data type: `Any`
+
+Set Password Authentication when password-based authentication methods used
+
+Default value: $postgresql::params::password_encryption
+
 ##### `manage_pg_hba_conf`
 
 Data type: `Any`
diff --git a/manifests/params.pp b/manifests/params.pp
index 6b2a4d28d4..a2a0a6c066 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -24,7 +24,7 @@
   $manage_selinux             = pick($manage_selinux, false)
   $package_ensure             = 'present'
   $module_workdir             = pick($module_workdir,'/tmp')
-
+  $password_encryption        = undef
   $manage_datadir             = true
   $manage_logdir              = true
   $manage_xlogdir             = true
diff --git a/manifests/server.pp b/manifests/server.pp
index 4deb155485..f388cd64de 100644
--- a/manifests/server.pp
+++ b/manifests/server.pp
@@ -137,6 +137,7 @@
   $manage_datadir             = $postgresql::params::manage_datadir,
   $manage_logdir              = $postgresql::params::manage_logdir,
   $manage_xlogdir             = $postgresql::params::manage_xlogdir,
+  $password_encryption        = $postgresql::params::password_encryption,
 
   Hash[String, Hash] $roles         = {},
   Hash[String, Any] $config_entries = {},
diff --git a/manifests/server/config.pp b/manifests/server/config.pp
index bc1234ed8b..9b9979383c 100644
--- a/manifests/server/config.pp
+++ b/manifests/server/config.pp
@@ -22,6 +22,7 @@
   $service_name               = $postgresql::server::service_name
   $log_line_prefix            = $postgresql::server::log_line_prefix
   $timezone                   = $postgresql::server::timezone
+  $password_encryption        = $postgresql::server::password_encryption
 
   if ($manage_pg_hba_conf == true) {
     # Prepare the main pg_hba file
@@ -140,6 +141,12 @@
     value => $port,
   }
 
+  if ($password_encryption) and ($version >= 10){
+    postgresql::server::config_entry { 'password_encryption':
+      value => $password_encryption,
+    }
+  }
+
   postgresql::server::config_entry { 'data_directory':
     value => $datadir,
   }