diff --git a/Cargo.lock b/Cargo.lock
index c4b3642..ccb720d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3188,7 +3188,7 @@ dependencies = [
  "futures-core",
  "futures-util",
  "medical-core",
- "rand 0.8.6",
+ "rand 0.10.1",
  "reqwest 0.12.28",
  "serde",
  "serde_json",
@@ -3322,7 +3322,7 @@ dependencies = [
  "medical-core",
  "pbkdf2",
  "proptest",
- "rand 0.8.6",
+ "rand 0.10.1",
  "regex",
  "serde",
  "serde_json",
@@ -3349,7 +3349,7 @@ dependencies = [
  "mdns-sd",
  "medical-core",
  "medical-security",
- "rand 0.8.6",
+ "rand 0.10.1",
  "reqwest 0.12.28",
  "rusqlite",
  "serde",
@@ -4557,7 +4557,7 @@ dependencies = [
  "bitflags 2.11.1",
  "num-traits",
  "rand 0.9.4",
- "rand_chacha 0.9.0",
+ "rand_chacha",
  "rand_xorshift",
  "regex-syntax",
  "rusty-fork",
@@ -4645,24 +4645,13 @@ dependencies = [
  "uuid",
 ]
 
-[[package]]
-name = "rand"
-version = "0.8.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
-dependencies = [
- "libc",
- "rand_chacha 0.3.1",
- "rand_core 0.6.4",
-]
-
 [[package]]
 name = "rand"
 version = "0.9.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
 dependencies = [
- "rand_chacha 0.9.0",
+ "rand_chacha",
  "rand_core 0.9.5",
 ]
 
@@ -4677,16 +4666,6 @@ dependencies = [
  "rand_core 0.10.1",
 ]
 
-[[package]]
-name = "rand_chacha"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
-dependencies = [
- "ppv-lite86",
- "rand_core 0.6.4",
-]
-
 [[package]]
 name = "rand_chacha"
 version = "0.9.0"
@@ -5025,7 +5004,7 @@ dependencies = [
  "medical-stt-providers",
  "medical-translation",
  "medical-tts-providers",
- "rand 0.8.6",
+ "rand 0.10.1",
  "reqwest 0.12.28",
  "rusqlite",
  "serde",
diff --git a/Cargo.toml b/Cargo.toml
index b7b1a5e..ca8fc50 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -71,7 +71,7 @@ bytemuck = { version = "1", features = ["derive"] }
 # Crates pinned at workspace level to keep one source of truth.
 # `dirs` was previously split (5 in sharing, 6 in src-tauri); unifying to 6
 # is the only real version dedup — the rest already match across crates.
-rand = "0.8"
+rand = "0.10"
 hex = "0.4"
 base64 = "0.22"
 sha2 = "0.10"