diff --git a/config/application.rb b/config/application.rb
index 3f84e08cb..d81c8782b 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -37,5 +37,8 @@ class Application < Rails::Application
     config.active_record.encryption.primary_key = [ENV.fetch("ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY", "default_primary_key")]
     config.active_record.encryption.key_derivation_salt = ENV.fetch("ACTIVE_RECORD_KEY_DERIVATION_SALT", "default_salt")
     config.active_record.encryption.deterministic_key = [ENV.fetch("ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY", "default_deterministic_key")]
+    # for backwards compatibility's sake
+    config.active_record.encryption.hash_digest_class = OpenSSL::Digest::SHA256 # New data uses SHA256
+    config.active_record.encryption.support_sha1_for_non_deterministic_encryption = true # Allows decryption of old SHA1 data
   end
 end