diff --git a/.github/workflows/ci3.yml b/.github/workflows/ci3.yml
index aa22c7aa747f..3ae684fc8a49 100644
--- a/.github/workflows/ci3.yml
+++ b/.github/workflows/ci3.yml
@@ -66,6 +66,7 @@ jobs:
           LOG_ID: ${{ github.run_id }}
           NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
           NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          DOCKERHUB_PASSWORD: ${{ secrets.DOCKERHUB_PASSWORD }}
         run: |
           ./ci.sh ec2
       - name: Download benchmarks
@@ -153,6 +154,7 @@ jobs:
           ARCH: arm64
           LOG_ID: ${{ github.run_id }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          DOCKERHUB_PASSWORD: ${{ secrets.DOCKERHUB_PASSWORD }}
         run: |
           ./ci.sh ec2
 
diff --git a/ci3/bootstrap_ec2 b/ci3/bootstrap_ec2
index 7e2aa3751266..4ce20cef9dcc 100755
--- a/ci3/bootstrap_ec2
+++ b/ci3/bootstrap_ec2
@@ -100,6 +100,10 @@ container_script=$(cat <<EOF
   git checkout -b $REF_NAME
   export CI_FULL=$CI_FULL
   source ci3/source
+
+  if [ -n "${DOCKERHUB_PASSWORD:-}" ] && ([ "$REF_NAME" == "master" ] || semver check "$REF_NAME"); then
+    echo $DOCKERHUB_PASSWORD | docker login -u aztecprotocolci --password-stdin
+  fi
   echo "env: REF_NAME=$REF_NAME COMMIT_HASH=$COMMIT_HASH CURRENT_VERSION=$CURRENT_VERSION CI_FULL=$CI_FULL"
   if semver check "$REF_NAME"; then
     echo "Performing a release because $REF_NAME is a semver."