diff --git a/composer.json b/composer.json
index daf6f58..f592849 100644
--- a/composer.json
+++ b/composer.json
@@ -27,7 +27,7 @@
 		"humanmade/disable-accounts": "^0.2.2",
 		"humanmade/php-basic-auth": "^1.1.7",
 		"humanmade/require-login": "~1.0.5",
-		"humanmade/two-factor": "^0.3.3",
+		"humanmade/two-factor": "^0.6.0",
 		"xwp/stream": "^3.10.0"
 	},
 	"extra": {