diff --git a/composer.json b/composer.json
index 2af0854ccb0c593cd12f8f1d4eacc36613abda6d..5b3ae250d582369c9665072215477a21cc97b9ac 100644
--- a/composer.json
+++ b/composer.json
@@ -110,7 +110,7 @@
     "drupal/slick_views": "1.0-rc2",
     "drupal/slick_media": "1.0",
     "drupal/username_enumeration_prevention": "1.0-beta1",
-    "drupal/password_policy": "3.0-alpha3",
+    "drupal/password_policy": "3.0-alpha4",
     "drupal/seckit": "1.0-alpha2",
     "drupal/security_review": "1.x-dev#35ebae445bb260e961e47c4c58efe7c50c228999",
     "drupal/honeypot": "1.27",
diff --git a/drupal-org.make b/drupal-org.make
index cf383f62206d5aff0e62c623687a2106ee0069b3..2b9a3af586fb99e734528627b8219f0edbf62ed4 100644
--- a/drupal-org.make
+++ b/drupal-org.make
@@ -345,7 +345,7 @@ projects[username_enumeration_prevention][version] = 1.0-beta1
 projects[username_enumeration_prevention][patch][] = https://www.drupal.org/files/issues/username_enumeration_prevention_requirements_severity-2823440-1.patch
 
 projects[password_policy][type] = module
-projects[password_policy][version] = 3.0-alpha3
+projects[password_policy][version] = 3.0-alpha4
 
 projects[seckit][type] = module
 projects[seckit][version] = 1.0-alpha2