diff --git a/Cargo.lock b/Cargo.lock
index f15dcf9..2784247 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -146,9 +146,9 @@ checksum = "904dfeac50f3cdaba28fc6f57fdcddb75f49ed61346676a78c4ffe55877802fd"
 
 [[package]]
 name = "bcrypt-pbkdf"
-version = "0.6.2"
+version = "0.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c38c03b9506bd92bf1ef50665a81eda156f615438f7654bffba58907e6149d7"
+checksum = "12621b8e87feb183a6e5dbb315e49026b2229c4398797ee0ae2d1bc00aef41b9"
 dependencies = [
  "blowfish",
  "crypto-mac",
@@ -1433,9 +1433,9 @@ checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
 
 [[package]]
 name = "pinentry"
-version = "0.3.0"
+version = "0.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a8266a6e77c40ef16f3d00bfe72ddb6e2fd29384d5b87e6bae1975099aa12921"
+checksum = "d3e07938af9d9631c06bb70a221f585a5b630786d1540bba0f099caf052a38c1"
 dependencies = [
  "log 0.4.14",
  "nom",
@@ -1881,9 +1881,9 @@ dependencies = [
 
 [[package]]
 name = "secrecy"
-version = "0.7.0"
+version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0673d6a6449f5e7d12a1caf424fd9363e2af3a4953023ed455e3c4beef4597c0"
+checksum = "9bd1c54ea06cfd2f6b63219704de0b9b4f72dcc2b8fdef820be6cd799780e91e"
 dependencies = [
  "zeroize",
 ]
@@ -2393,9 +2393,9 @@ dependencies = [
 
 [[package]]
 name = "zeroize"
-version = "1.3.0"
+version = "1.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4756f7db3f7b5574938c3eb1c117038b8e07f95ee6718c0efad4ac21508f1efd"
+checksum = "377db0846015f7ae377174787dd452e1c5f5a9050bc6f954911d01f116daa0cd"
 dependencies = [
  "zeroize_derive",
 ]
diff --git a/age-core/Cargo.toml b/age-core/Cargo.toml
index b10f59d..8559f99 100644
--- a/age-core/Cargo.toml
+++ b/age-core/Cargo.toml
@@ -32,7 +32,7 @@ cookie-factory = "0.3.1"
 nom = { version = "6", default-features = false, features = ["alloc"] }
 
 # Secret management
-secrecy = "0.7"
+secrecy = "0.8"
 
 # Plugin backend
 tempfile = { version = "3.2.0", optional = true }
diff --git a/age-plugin/Cargo.toml b/age-plugin/Cargo.toml
index e72e965..70e21b7 100644
--- a/age-plugin/Cargo.toml
+++ b/age-plugin/Cargo.toml
@@ -12,7 +12,7 @@ edition = "2018"
 age-core = { version = "0.6.0", path = "../age-core", features = ["plugin"] }
 bech32 = "0.8"
 chrono = "0.4"
-secrecy = "0.7"
+secrecy = "0.8"
 
 [dev-dependencies]
 gumdrop = "0.8"
diff --git a/age/Cargo.toml b/age/Cargo.toml
index 1dda790..1bc2245 100644
--- a/age/Cargo.toml
+++ b/age/Cargo.toml
@@ -60,7 +60,7 @@ cookie-factory = "0.3.1"
 nom = { version = "6", default-features = false, features = ["alloc"] }
 
 # Secret management
-secrecy = "0.7"
+secrecy = "0.8"
 subtle = "2"
 zeroize = "1"
 
@@ -76,7 +76,7 @@ rust-embed = "5"
 
 # Common CLI dependencies
 console = { version = "0.14", optional = true }
-pinentry = { version = "0.3", optional = true }
+pinentry = { version = "0.4", optional = true }
 rpassword = { version = "5", optional = true }
 
 web-sys = { version = "0.3", optional = true, features = ["Window", "Performance"]}
diff --git a/fuzz-afl/Cargo.lock b/fuzz-afl/Cargo.lock
index 420a6d4..591d459 100644
--- a/fuzz-afl/Cargo.lock
+++ b/fuzz-afl/Cargo.lock
@@ -820,9 +820,9 @@ dependencies = [
 
 [[package]]
 name = "secrecy"
-version = "0.7.0"
+version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0673d6a6449f5e7d12a1caf424fd9363e2af3a4953023ed455e3c4beef4597c0"
+checksum = "9bd1c54ea06cfd2f6b63219704de0b9b4f72dcc2b8fdef820be6cd799780e91e"
 dependencies = [
  "zeroize",
 ]
diff --git a/fuzz/Cargo.lock b/fuzz/Cargo.lock
index c08f015..e74ccd4 100644
--- a/fuzz/Cargo.lock
+++ b/fuzz/Cargo.lock
@@ -780,9 +780,9 @@ dependencies = [
 
 [[package]]
 name = "secrecy"
-version = "0.7.0"
+version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0673d6a6449f5e7d12a1caf424fd9363e2af3a4953023ed455e3c4beef4597c0"
+checksum = "9bd1c54ea06cfd2f6b63219704de0b9b4f72dcc2b8fdef820be6cd799780e91e"
 dependencies = [
  "zeroize",
 ]
diff --git a/rage/Cargo.toml b/rage/Cargo.toml
index bcd65b9..3d7ee2a 100644
--- a/rage/Cargo.toml
+++ b/rage/Cargo.toml
@@ -52,9 +52,9 @@ i18n-embed = { version = "0.12", features = ["desktop-requester", "fluent-system
 i18n-embed-fl = "0.5"
 lazy_static = "1"
 log = "0.4"
-pinentry = "0.3"
+pinentry = "0.4"
 rust-embed = "5"
-secrecy = "0.7"
+secrecy = "0.8"
 
 # rage-mount dependencies
 fuse_mt = { version = "0.5.1", optional = true }