diff --git a/Gemfile b/Gemfile
index 3c3c799f5..33acee898 100644
--- a/Gemfile
+++ b/Gemfile
@@ -31,7 +31,7 @@ gem "yajl-ruby",   "1.4.3"
 
 # Authentication
 
-gem "devise", "4.8.1"
+gem "devise", "4.9.2"
 gem "devise_lastseenable", "0.0.6"
 gem "devise-two-factor", "4.0.2"
 gem "rqrcode", "2.1.1"
diff --git a/Gemfile.lock b/Gemfile.lock
index 69daba5c7..cee97683f 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -89,7 +89,7 @@ GEM
     babel-transpiler (0.7.0)
       babel-source (>= 4.0, < 6)
       execjs (~> 2.0)
-    bcrypt (3.1.18)
+    bcrypt (3.1.19)
     bindata (2.4.15)
     bootstrap-sass (3.4.1)
       autoprefixer-rails (>= 5.2.1)
@@ -196,7 +196,7 @@ GEM
       database_cleaner-core (~> 2.0.0)
     database_cleaner-core (2.0.1)
     date (3.3.3)
-    devise (4.8.1)
+    devise (4.9.2)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 4.1.0)
@@ -805,7 +805,7 @@ DEPENDENCIES
   cucumber-rails (= 2.5.1)
   cuprite (= 0.14.3)
   database_cleaner-active_record (= 2.0.1)
-  devise (= 4.8.1)
+  devise (= 4.9.2)
   devise-two-factor (= 4.0.2)
   devise_lastseenable (= 0.0.6)
   diaspora_federation-json_schema (= 1.1.0)