diff --git a/Cargo.lock b/Cargo.lock
index 2efc3e668..e14197207 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -294,9 +294,9 @@ checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3"
 
 [[package]]
 name = "subtle"
-version = "2.4.1"
+version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6bdef32e8150c2a081110b42772ffe7d7c9032b606bc226c8260fd97e0976601"
+checksum = "81cdd64d312baedb58e21336b31bc043b77e01cc99033ce76ef539f78e965ebc"
 
 [[package]]
 name = "syn"
diff --git a/password-hash/Cargo.toml b/password-hash/Cargo.toml
index dd74c22b7..5ded28915 100644
--- a/password-hash/Cargo.toml
+++ b/password-hash/Cargo.toml
@@ -17,7 +17,7 @@ keywords = ["crypt", "mcf", "password", "pbkdf", "phc"]
 
 [dependencies]
 base64ct = ">=1, <1.1.0"
-subtle = { version = ">=2, <2.5", default-features = false }
+subtle = { version = ">=2, <2.6", default-features = false }
 
 # optional features
 rand_core = { version = "0.6", optional = true, default-features = false }