diff --git a/Cargo.lock b/Cargo.lock
index f17717249b..07ea40dfc7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -857,7 +857,7 @@ dependencies = [
  "pq-sys",
  "proptest",
  "rand",
- "secrecy",
+ "secrecy 0.10.3",
  "serde",
  "serde_with",
  "sha3",
@@ -4584,7 +4584,7 @@ dependencies = [
  "hkdf",
  "omicron-common",
  "omicron-workspace-hack",
- "secrecy",
+ "secrecy 0.10.3",
  "sha3",
  "slog",
  "thiserror",
@@ -9795,6 +9795,15 @@ dependencies = [
  "zeroize",
 ]
 
+[[package]]
+name = "secrecy"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e891af845473308773346dc847b2c23ee78fe442e0472ac50e22a18a93d3ae5a"
+dependencies = [
+ "zeroize",
+]
+
 [[package]]
 name = "security-framework"
 version = "2.11.0"
@@ -10609,7 +10618,7 @@ dependencies = [
  "libipcc",
  "pem-rfc7468",
  "rustls 0.23.10",
- "secrecy",
+ "secrecy 0.8.0",
  "serde",
  "sha2",
  "sha3",
diff --git a/Cargo.toml b/Cargo.toml
index 50be6c2a93..2f208b640e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -535,7 +535,7 @@ rustls-pemfile = "2.1.3"
 rustyline = "14.0.0"
 samael = { version = "0.0.17", features = ["xmlsec"] }
 schemars = "0.8.21"
-secrecy = "0.8.0"
+secrecy = "0.10.3"
 semver = { version = "1.0.23", features = ["std", "serde"] }
 serde = { version = "1.0", default-features = false, features = [ "derive", "rc" ] }
 serde_human_bytes = { git = "https://github.com/oxidecomputer/serde_human_bytes", branch = "main" }