diff --git a/Cargo.lock b/Cargo.lock
index b170aac..5452381 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -85,6 +85,12 @@ version = "0.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32637268377fc7b10a8c6d51de3e7fba1ce5dd371a96e342b34e6078db558e7f"
 
+[[package]]
+name = "bech32"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "efbd3e1070bbdf4cd88a75264e18e8a26f7cb5c6949eadf0ceb85fb159cf08f8"
+
 [[package]]
 name = "bitcoin"
 version = "0.32.102"
@@ -1476,7 +1482,7 @@ name = "tinywallet-bus"
 version = "0.5.0"
 dependencies = [
  "async-trait",
- "bech32 0.11.1",
+ "bech32 0.12.0",
  "bs58",
  "hex",
  "ripemd 0.2.0",
diff --git a/crates/tinywallet-bus/Cargo.toml b/crates/tinywallet-bus/Cargo.toml
index a069e30..0779216 100644
--- a/crates/tinywallet-bus/Cargo.toml
+++ b/crates/tinywallet-bus/Cargo.toml
@@ -28,7 +28,7 @@ hex = { version = "0.4", optional = true }
 # selection and witness-program length rules included. This is what lets a host
 # validate a Bitcoin address without the `bitcoin` crate's native secp256k1
 # build; see `src/address/btc.rs`.
-bech32 = { version = "0.11", optional = true }
+bech32 = { version = "0.12", optional = true }
 # RIPEMD-160, the second half of Bitcoin's HASH160. Feeds a `Sha256` (sha2
 # 0.11) output, so the two must sit on the same `digest` line — hence 0.2.
 ripemd = { version = "0.2", optional = true }