diff --git a/apps/web/webpack.base.js b/apps/web/webpack.base.js
index cc17b3b7cfd..211ca25fdb3 100644
--- a/apps/web/webpack.base.js
+++ b/apps/web/webpack.base.js
@@ -320,6 +320,7 @@ module.exports.buildConfig = function buildConfig(params) {
                     https://www.paypalobjects.com
                     https://q.stripe.com
                     https://haveibeenpwned.com
+                    https://logos.haveibeenpwned.com
                     ;media-src
                     'self'
                     https://assets.bitwarden.com