diff --git a/ghost/security/lib/password.js b/ghost/security/lib/password.js
index cb0a0e308a..0bf906481a 100644
--- a/ghost/security/lib/password.js
+++ b/ghost/security/lib/password.js
@@ -2,7 +2,7 @@ const bcrypt = require('bcryptjs');
 
 let HASH_ROUNDS = 10;
 
-if (process.env.NODE_ENV.startsWith('testing')) {
+if (process.env.NODE_ENV?.startsWith('testing')) {
     HASH_ROUNDS = 1;
 }