diff --git a/Gemfile b/Gemfile
index 357bb15f55..0c34340f28 100644
--- a/Gemfile
+++ b/Gemfile
@@ -87,7 +87,7 @@ gem 'pg', '~> 1.5.4'
 gem 'acts_as_versioned', git: 'https://github.com/mysociety/acts_as_versioned.git',
                          ref: '13e928b'
 gem 'active_model_otp'
-gem 'bcrypt', '~> 3.1.19'
+gem 'bcrypt', '~> 3.1.20'
 gem 'cancancan', '~> 3.5.0'
 gem 'charlock_holmes', '~> 0.7.7'
 gem 'dalli', '~> 3.2.6'
diff --git a/Gemfile.lock b/Gemfile.lock
index 2c1225eb21..6c807ee53a 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -153,7 +153,7 @@ GEM
       faraday (~> 0.9)
       faraday_middleware (~> 0.10)
       nokogiri (~> 1.6, >= 1.6.8)
-    bcrypt (3.1.19)
+    bcrypt (3.1.20)
     bindex (0.8.1)
     bootstrap-sass (2.3.2.2)
       sass (~> 3.2)
@@ -567,7 +567,7 @@ DEPENDENCIES
   annotate (< 3.2.1)
   aws-sdk-s3
   azure-storage
-  bcrypt (~> 3.1.19)
+  bcrypt (~> 3.1.20)
   bootstrap-sass (~> 2.3.2.2)
   bullet (~> 7.1.4)
   cancancan (~> 3.5.0)