diff --git a/Cargo.lock b/Cargo.lock
index b427d779ea..9451b22c7b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -857,7 +857,7 @@ dependencies = [
  "pq-sys",
  "proptest",
  "rand",
- "secrecy",
+ "secrecy 0.10.2",
  "serde",
  "serde_with",
  "sha3",
@@ -4585,7 +4585,7 @@ dependencies = [
  "hkdf",
  "omicron-common",
  "omicron-workspace-hack",
- "secrecy",
+ "secrecy 0.10.2",
  "sha3",
  "slog",
  "thiserror",
@@ -4757,7 +4757,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0c2a198fb6b0eada2a8df47933734e6d35d350665a33a3593d7164fa52c75c19"
 dependencies = [
  "cfg-if",
- "windows-targets 0.48.5",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -9795,6 +9795,15 @@ dependencies = [
  "zeroize",
 ]
 
+[[package]]
+name = "secrecy"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba079fa568d52545cd70b334b2ce6f88f62b8fc2bda9290f48a0578388a49331"
+dependencies = [
+ "zeroize",
+]
+
 [[package]]
 name = "security-framework"
 version = "2.11.0"
@@ -10609,7 +10618,7 @@ dependencies = [
  "libipcc",
  "pem-rfc7468",
  "rustls 0.23.10",
- "secrecy",
+ "secrecy 0.8.0",
  "serde",
  "sha2",
  "sha3",
diff --git a/Cargo.toml b/Cargo.toml
index c237803e03..ce32bee9b5 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -542,7 +542,7 @@ rustls-pemfile = "2.1.3"
 rustyline = "14.0.0"
 samael = { version = "0.0.17", features = ["xmlsec"] }
 schemars = "0.8.21"
-secrecy = "0.8.0"
+secrecy = "0.10.2"
 semver = { version = "1.0.23", features = ["std", "serde"] }
 serde = { version = "1.0", default-features = false, features = [ "derive", "rc" ] }
 serde_human_bytes = { git = "https://github.com/oxidecomputer/serde_human_bytes", branch = "main" }