diff --git a/charts/open-notificaties/README.md b/charts/open-notificaties/README.md
index bb60ab4..e3b93ad 100644
--- a/charts/open-notificaties/README.md
+++ b/charts/open-notificaties/README.md
@@ -73,6 +73,7 @@ table below describes the supported versions
 | `settings.isHttps` | Used to construct absolute URLs and controls a variety of security settings | `true` |
 | `settings.debug` | Only set this to True on a local development environment. Various other security settings are derived from this setting | `false` |
 | `settings.flower.urlPrefix` | If enabled, deploy Flower on a non-root URL | `""` |
+| `settings.flower.basicAuth` | Secure Flower with [Basic Authentication](https://flower.readthedocs.io/en/latest/config.html#basic-auth). This is a comma-separated list of `username:password`. You should configure this when `flower.ingress.enabled` is set to true. | `""` |
 | `worker.podLabels` | Additional labels to be set on the open-notification worker pods | `{}` |
 | `postgresql.persistence.enabled` | Enable PostgreSQL persistency | `false` |
 | `postgresql.persistence.size` | Configure PostgreSQL size | `"1Gi"` |
diff --git a/charts/open-notificaties/templates/secret.yaml b/charts/open-notificaties/templates/secret.yaml
index 517a61f..8743a99 100644
--- a/charts/open-notificaties/templates/secret.yaml
+++ b/charts/open-notificaties/templates/secret.yaml
@@ -20,6 +20,7 @@ data:
   SENTRY_DSN: {{ .Values.settings.sentry.dsn | toString | b64enc | quote }}
   {{- end }}
   {{- if .Values.flower.enabled }}
+  FLOWER_BASIC_AUTH: {{ .Values.settings.flower.basicAuth | toString | b64enc | quote }}
   {{- range $index, $index_value := .Values.flower.extraEnvVarsSecret }}
   {{ $index }}: {{ $index_value | toString | b64enc | quote }}
   {{- end }}
diff --git a/charts/open-notificaties/values.yaml b/charts/open-notificaties/values.yaml
index f6214db..660f8cb 100644
--- a/charts/open-notificaties/values.yaml
+++ b/charts/open-notificaties/values.yaml
@@ -176,6 +176,7 @@ settings:
 
   flower:
     urlPrefix: ""
+    basicAuth: ""
 
 #######################
 # PostgreSQL subchart #