diff --git a/requirements-django30.txt b/requirements-django30.txt
index 68c5d5b5d..7970c5ef6 100644
--- a/requirements-django30.txt
+++ b/requirements-django30.txt
@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile
 # To update, run:
 #
-#    pip-compile --output-file=requirements-django30.txt requirements/base.txt requirements/django30.txt
+#    pip-compile --output-file=requirements-django30.txt requirements/base.txt requirements/django30.txt requirements/forced-upgrade.txt
 #
 --index-url https://pypi.python.org/simple/
 
@@ -42,8 +42,9 @@ chardet==3.0.4
     # via requests
 constantly==15.1.0
     # via twisted
-cryptography==3.2.1
+cryptography==3.4.6
     # via
+    #   -r requirements/forced-upgrade.txt
     #   autobahn
     #   pyopenssl
     #   service-identity
@@ -153,7 +154,6 @@ service-identity==18.1.0
 six==1.15.0
     # via
     #   automat
-    #   cryptography
     #   jsonschema
     #   pyopenssl
     #   python-dateutil
diff --git a/requirements-django31.txt b/requirements-django31.txt
index e8e1798ab..d21c3e674 100644
--- a/requirements-django31.txt
+++ b/requirements-django31.txt
@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile
 # To update, run:
 #
-#    pip-compile --output-file=requirements-django31.txt requirements/base.txt requirements/django31.txt
+#    pip-compile --output-file=requirements-django31.txt requirements/base.txt requirements/django31.txt requirements/forced-upgrade.txt
 #
 --index-url https://pypi.python.org/simple/
 
@@ -42,8 +42,9 @@ chardet==3.0.4
     # via requests
 constantly==15.1.0
     # via twisted
-cryptography==3.2.1
+cryptography==3.4.6
     # via
+    #   -r requirements/forced-upgrade.txt
     #   autobahn
     #   pyopenssl
     #   service-identity
@@ -153,7 +154,6 @@ service-identity==18.1.0
 six==1.15.0
     # via
     #   automat
-    #   cryptography
     #   jsonschema
     #   pyopenssl
     #   python-dateutil
diff --git a/requirements.txt b/requirements.txt
index 3801e7daa..052780892 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile
 # To update, run:
 #
-#    pip-compile --output-file=requirements.txt requirements/prod.txt
+#    pip-compile --output-file=requirements.txt requirements/forced-upgrade.txt requirements/prod.txt
 #
 --index-url https://pypi.python.org/simple/
 
@@ -42,8 +42,9 @@ chardet==3.0.4
     # via requests
 constantly==15.1.0
     # via twisted
-cryptography==3.2.1
+cryptography==3.4.6
     # via
+    #   -r requirements/forced-upgrade.txt
     #   autobahn
     #   pyopenssl
     #   service-identity
@@ -153,7 +154,6 @@ service-identity==18.1.0
 six==1.15.0
     # via
     #   automat
-    #   cryptography
     #   jsonschema
     #   pyopenssl
     #   python-dateutil
diff --git a/requirements/forced-upgrade.txt b/requirements/forced-upgrade.txt
new file mode 100644
index 000000000..6bc0dd57c
--- /dev/null
+++ b/requirements/forced-upgrade.txt
@@ -0,0 +1 @@
+cryptography>=3.3.2
diff --git a/tox.ini b/tox.ini
index 9099f1599..cd9a7a937 100644
--- a/tox.ini
+++ b/tox.ini
@@ -34,9 +34,9 @@ deps =
     pip-tools
 
 commands =
-    pip-compile --output-file requirements.txt requirements/prod.txt
-    pip-compile --output-file requirements-django30.txt requirements/django30.txt requirements/base.txt
-    pip-compile --output-file requirements-django31.txt requirements/django31.txt requirements/base.txt
+    pip-compile --output-file requirements.txt requirements/prod.txt requirements/forced-upgrade.txt
+    pip-compile --output-file requirements-django30.txt requirements/django30.txt requirements/base.txt requirements/forced-upgrade.txt
+    pip-compile --output-file requirements-django31.txt requirements/django31.txt requirements/base.txt requirements/forced-upgrade.txt
 
 [testenv:coverage-xml]
 basepython = python3.8