diff --git a/package.json b/package.json
index ea951f09e7..cd75735632 100644
--- a/package.json
+++ b/package.json
@@ -123,7 +123,7 @@
     "@signalapp/libsignal-client": "0.95.0",
     "@signalapp/mute-state-change": "workspace:*",
     "@signalapp/ringrtc": "2.69.4",
-    "@signalapp/sqlcipher": "3.3.5",
+    "@signalapp/sqlcipher": "3.3.9",
     "@signalapp/windows-ucv": "workspace:*",
     "google-libphonenumber": "3.2.44"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 97c1ef8aa0..a62ed953b5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -53,8 +53,8 @@ importers:
         specifier: 2.69.4
         version: 2.69.4
       '@signalapp/sqlcipher':
-        specifier: 3.3.5
-        version: 3.3.5
+        specifier: 3.3.9
+        version: 3.3.9
       '@signalapp/windows-ucv':
         specifier: workspace:*
         version: link:packages/windows-ucv
@@ -4213,8 +4213,8 @@ packages:
     resolution: {integrity: sha512-OLavGfCzfYuqUVoAtTeHi7QrXpVNmT8LxzOI9XOPId29bn5gJNrAG31IPVw7Fw7vvWpZwZHFi5MTmcmZGibs4A==, tarball: https://registry.npmjs.org/@signalapp/ringrtc/-/ringrtc-2.69.4.tgz}
     hasBin: true
 
-  '@signalapp/sqlcipher@3.3.5':
-    resolution: {integrity: sha512-0kkHQixiaFOFYCXP6J8zsvXeq7REf5nucX+BMY8Gy5E6F2BEM2Ap9NsDNaB+wHZ6QqqsItQRvSE4PaYhTtWGIg==, tarball: https://registry.npmjs.org/@signalapp/sqlcipher/-/sqlcipher-3.3.5.tgz}
+  '@signalapp/sqlcipher@3.3.9':
+    resolution: {integrity: sha512-51NAV0CqIEreGx3r0hq85vjHC8NXZhGr9efywaqHRsjpbEdvdYARmFxObmMI55rjyqE5eLQ/QsPJzigBoQ6thw==, tarball: https://registry.npmjs.org/@signalapp/sqlcipher/-/sqlcipher-3.3.9.tgz}
 
   '@sinclair/typebox@0.27.8':
     resolution: {integrity: sha512-+Fj43pSMwJs4KRrH/938Uf+uAELIgVBmQzg/q1YG10djyfA3TnrU8N8XzqCh/okZdszqBQTZf96idMfE5lnwTA==, tarball: https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.27.8.tgz}
@@ -14603,7 +14603,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@signalapp/sqlcipher@3.3.5':
+  '@signalapp/sqlcipher@3.3.9':
     dependencies:
       node-addon-api: 8.5.0
       node-gyp-build: 4.8.4
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index d0428a8836..dbc1de861f 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -81,7 +81,7 @@ allowBuilds:
   '@signalapp/libsignal-client@0.92.2': true # duplicate package
   '@signalapp/libsignal-client@0.95.0': true
   '@signalapp/ringrtc@2.69.4': true
-  '@signalapp/sqlcipher@3.3.5': true
+  '@signalapp/sqlcipher@3.3.9': true
   '@signalapp/windows-ucv@1.0.1': true
   '@swc/core@1.10.16': true
   '@tailwindcss/oxide@4.3.0': true