Manual:$wgHKDFSecret/en

Details
If the value is a string, it is used as the secret for the HMAC-based key derivation function, else, if it is evaluated as false, $wgSecretKey is used for this function.