diff --git a/Gemfile b/Gemfile
index ea7e6bbee..04f25c8fd 100644
--- a/Gemfile
+++ b/Gemfile
@@ -28,7 +28,7 @@ gem "json-schema", "3.0.0"
 
 gem "devise", "4.8.1"
 gem "devise_lastseenable", "0.0.6"
-gem "devise-two-factor", "4.0.1"
+gem "devise-two-factor", "4.0.2"
 gem "rqrcode", "2.1.0"
 
 # Captcha
diff --git a/Gemfile.lock b/Gemfile.lock
index 99158b281..5486bb986 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -197,11 +197,11 @@ GEM
       railties (>= 4.1.0)
       responders
       warden (~> 1.2.3)
-    devise-two-factor (4.0.1)
-      activesupport (< 6.2)
+    devise-two-factor (4.0.2)
+      activesupport (< 7.1)
       attr_encrypted (>= 1.3, < 4, != 2)
       devise (~> 4.0)
-      railties (< 6.2)
+      railties (< 7.1)
       rotp (~> 6.0)
     devise_lastseenable (0.0.6)
       devise
@@ -812,7 +812,7 @@ DEPENDENCIES
   cucumber-rails (= 2.4.0)
   database_cleaner-active_record (= 2.0.1)
   devise (= 4.8.1)
-  devise-two-factor (= 4.0.1)
+  devise-two-factor (= 4.0.2)
   devise_lastseenable (= 0.0.6)
   diaspora-prosody-config (= 0.0.7)
   diaspora_federation-json_schema (= 0.2.7)