diff --git a/Gemfile.lock b/Gemfile.lock
index c23d5d10b8..2e9d327ba5 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -187,7 +187,7 @@ PATH
     openproject-two_factor_authentication (1.0.0)
       aws-sdk-sns (~> 1.30.0)
       messagebird-rest (~> 1.4.2)
-      rotp (~> 5.1)
+      rotp (~> 6.1)
 
 PATH
   remote: modules/webhooks
@@ -812,8 +812,7 @@ GEM
     rinku (2.0.6)
     roar (1.1.0)
       representable (~> 3.0.0)
-    rotp (5.1.0)
-      addressable (~> 2.5)
+    rotp (6.1.0)
     rouge (3.17.0)
     rspec (3.9.0)
       rspec-core (~> 3.9.0)
diff --git a/modules/two_factor_authentication/openproject-two_factor_authentication.gemspec b/modules/two_factor_authentication/openproject-two_factor_authentication.gemspec
index c019d8fbf6..8057990f1f 100644
--- a/modules/two_factor_authentication/openproject-two_factor_authentication.gemspec
+++ b/modules/two_factor_authentication/openproject-two_factor_authentication.gemspec
@@ -13,7 +13,7 @@ Gem::Specification.new do |s|
   s.files = Dir["{app,config,db,lib}/**/*", "CHANGELOG.md", "README.rdoc"]
   s.test_files = Dir["spec/**/*"]
 
-  s.add_dependency 'rotp', '~> 5.1'
+  s.add_dependency 'rotp', '~> 6.1'
   s.add_dependency 'messagebird-rest', '~> 1.4.2'
 
   s.add_dependency 'aws-sdk-sns', '~> 1.30.0'