diff --git a/Cargo.lock b/Cargo.lock
index a5707ef..db657d0 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -959,7 +959,7 @@ dependencies = [
  "http-body-util",
  "mail-parser",
  "pulldown-cmark",
- "rand 0.9.4",
+ "rand 0.10.1",
  "reqwest",
  "secrecy",
  "serde",
@@ -1041,7 +1041,7 @@ dependencies = [
  "html5ever",
  "mail-parser",
  "markup5ever_rcdom",
- "rand 0.9.4",
+ "rand 0.10.1",
  "regex",
  "secrecy",
  "serde",
@@ -1079,7 +1079,7 @@ dependencies = [
  "hail-test",
  "lettre",
  "mail-parser",
- "rand 0.9.4",
+ "rand 0.10.1",
  "reqwest",
  "secrecy",
  "serde",
@@ -1104,7 +1104,7 @@ dependencies = [
  "hail-backend",
  "hex",
  "jmap-client",
- "rand 0.9.4",
+ "rand 0.10.1",
  "reqwest",
  "secrecy",
  "serde",
@@ -1161,7 +1161,7 @@ dependencies = [
  "hail-test",
  "lettre",
  "mail-parser",
- "rand 0.9.4",
+ "rand 0.10.1",
  "reqwest",
  "secrecy",
  "serde",
diff --git a/crates/hail-api/Cargo.toml b/crates/hail-api/Cargo.toml
index e15c832..8d17166 100644
--- a/crates/hail-api/Cargo.toml
+++ b/crates/hail-api/Cargo.toml
@@ -60,7 +60,7 @@ sqlx = { version = "0.9", default-features = false, features = ["runtime-tokio",
 
 # Auth + cookies + crypto plumbing.
 secrecy = "0.10"
-rand = "0.9"
+rand = "0.10"
 hex = "0.4"
 base64 = "0.22"
 chrono = { version = "0.4", default-features = false, features = ["clock", "serde"] }
diff --git a/crates/hail-core/Cargo.toml b/crates/hail-core/Cargo.toml
index 91fc178..67716ce 100644
--- a/crates/hail-core/Cargo.toml
+++ b/crates/hail-core/Cargo.toml
@@ -30,7 +30,7 @@ aes-gcm = "0.10"
 hex = "0.4"
 # CSPRNG for nonces. We use the OS RNG via `OsRng` so we don't have to
 # thread a seed through callers.
-rand = "0.9"
+rand = "0.10"
 # Constant-time byte comparisons (re-exported so downstream crates can
 # borrow the same version without separately depending on `subtle`).
 subtle = "2"
diff --git a/crates/hail-gmail/Cargo.toml b/crates/hail-gmail/Cargo.toml
index 6bf23a8..fab8f93 100644
--- a/crates/hail-gmail/Cargo.toml
+++ b/crates/hail-gmail/Cargo.toml
@@ -25,7 +25,7 @@ serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 thiserror = "2"
 sqlx = { version = "0.9", default-features = false, features = ["runtime-tokio", "sqlite", "chrono"] }
-rand = "0.9"
+rand = "0.10"
 sha2 = "0.10"
 reqwest = { version = "0.13", default-features = false, features = ["rustls", "http2", "json"] }
 base64 = "0.22"
diff --git a/crates/hail-jmap/Cargo.toml b/crates/hail-jmap/Cargo.toml
index c523083..10a9b27 100644
--- a/crates/hail-jmap/Cargo.toml
+++ b/crates/hail-jmap/Cargo.toml
@@ -15,7 +15,7 @@ futures-util = "0.3"
 hail-backend = { path = "../hail-backend" }
 jmap-client = { version = "0.4", features = ["async", "websockets"] }
 hex = "0.4"
-rand = "0.9"
+rand = "0.10"
 reqwest = { version = "0.13", default-features = false, features = ["rustls", "http2", "json", "form"] }
 secrecy = "0.10"
 serde = { version = "1", features = ["derive"] }
diff --git a/crates/hail-worker/Cargo.toml b/crates/hail-worker/Cargo.toml
index 72b7060..129ea8f 100644
--- a/crates/hail-worker/Cargo.toml
+++ b/crates/hail-worker/Cargo.toml
@@ -30,7 +30,7 @@ futures-util = "0.3"
 futures-core = "0.3"
 bytes = "1"
 chrono = { version = "0.4", default-features = false, features = ["clock"] }
-rand = "0.9"
+rand = "0.10"
 secrecy = "0.10"
 async-trait = "0.1"
 ahash = "0.8"