diff --git a/core/Cargo.lock b/core/Cargo.lock
index c2113fc..81341c2 100644
--- a/core/Cargo.lock
+++ b/core/Cargo.lock
@@ -1872,7 +1872,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7ab67060fc6b8ef687992d439ca0fa36e7ed17e9a0b16b25b601e8757df720de"
 dependencies = [
  "data-encoding",
- "syn 2.0.115",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -4561,7 +4561,7 @@ dependencies = [
  "crypto_box",
  "privstack-types",
  "proptest",
- "rand 0.8.5",
+ "rand 0.9.2",
  "serde",
  "serde_json",
  "thiserror 2.0.18",
@@ -4622,7 +4622,7 @@ dependencies = [
  "dirs",
  "ed25519-dalek",
  "hostname",
- "rand 0.8.5",
+ "rand 0.9.2",
  "reqwest",
  "serde",
  "serde_json",
@@ -4687,7 +4687,7 @@ dependencies = [
  "ed25519-dalek",
  "hex",
  "pretty_assertions",
- "rand 0.8.5",
+ "rand 0.9.2",
  "serde",
  "serde_json",
  "sha2",
@@ -4729,7 +4729,7 @@ dependencies = [
  "privstack-model",
  "privstack-storage",
  "privstack-types",
- "rand 0.8.5",
+ "rand 0.9.2",
  "reqwest",
  "rusqlite",
  "serde",
diff --git a/core/privstack-crypto/Cargo.toml b/core/privstack-crypto/Cargo.toml
index ce12ccb..092b74b 100644
--- a/core/privstack-crypto/Cargo.toml
+++ b/core/privstack-crypto/Cargo.toml
@@ -14,7 +14,7 @@ thiserror.workspace = true
 # Cryptography
 chacha20poly1305 = "0.10"
 argon2 = "0.5"
-rand = "0.8"
+rand = "0.9"
 zeroize = { version = "1.8", features = ["derive"] }
 base64 = "0.22"
 
diff --git a/core/privstack-license/Cargo.toml b/core/privstack-license/Cargo.toml
index 3884de1..b556f27 100644
--- a/core/privstack-license/Cargo.toml
+++ b/core/privstack-license/Cargo.toml
@@ -26,4 +26,4 @@ online = ["reqwest"]
 [dev-dependencies]
 tokio = { workspace = true, features = ["test-util", "macros", "rt-multi-thread"] }
 tempfile = "3.25"
-rand = "0.8"
+rand = "0.9"
diff --git a/core/privstack-ppk/Cargo.toml b/core/privstack-ppk/Cargo.toml
index e5a7b58..6abee40 100644
--- a/core/privstack-ppk/Cargo.toml
+++ b/core/privstack-ppk/Cargo.toml
@@ -18,7 +18,7 @@ hex = "0.4"
 
 # Ed25519 signing
 ed25519-dalek = { version = "2.1", features = ["rand_core"] }
-rand = "0.8"
+rand = "0.9"
 
 [dev-dependencies]
 tempfile.workspace = true
diff --git a/core/privstack-sync/Cargo.toml b/core/privstack-sync/Cargo.toml
index dd1ddfe..64e72cb 100644
--- a/core/privstack-sync/Cargo.toml
+++ b/core/privstack-sync/Cargo.toml
@@ -34,7 +34,7 @@ rusqlite = { version = "0.31", features = ["bundled"] }
 # Pairing / sync codes
 sha2 = "0.10"
 hex = "0.4"
-rand = "0.8"
+rand = "0.9"
 
 [dev-dependencies]
 tokio = { workspace = true, features = ["test-util", "process"] }