diff --git a/auth/index.html b/auth/index.html
index 274c9bd..754912b 100644
--- a/auth/index.html
+++ b/auth/index.html
@@ -860,7 +860,7 @@ <h2>Message log</h2>
   -->
   <script type="module">
     // TODO: this should be bundled at build time or replaced with code written by Turnkey entirely.
-    import * as hpke from "https://esm.sh/@hpke/core";
+    import * as hpke from "https://esm.sh/@hpke/core@1.2.7";
 
     // In memory spot for the credential to live. We do NOT persist it to localStorage.
     var CREDENTIAL_BYTES = null;