diff --git a/pkgs/development/python-modules/bcrypt/default.nix b/pkgs/development/python-modules/bcrypt/default.nix
index 592b5b22d47d..46771906d7cc 100644
--- a/pkgs/development/python-modules/bcrypt/default.nix
+++ b/pkgs/development/python-modules/bcrypt/default.nix
@@ -1,32 +1,45 @@
 { lib
 , buildPythonPackage
+, rustPlatform
 , setuptools
+, setuptools-rust
 , isPyPy
 , fetchPypi
 , pythonOlder
 , cffi
 , pytestCheckHook
-, six
 }:
 
 buildPythonPackage rec {
   pname = "bcrypt";
-  version = "3.2.2";
+  version = "4.0.0";
   format = "pyproject";
 
   disabled = pythonOlder "3.6";
 
   src = fetchPypi {
     inherit pname version;
-    sha256 = "sha256-QzxBDCF3BXcF2iqfLNAd0VdJOyp6wUyFk6FrPatra/s=";
+    hash = "sha256-xZwXD8kiX6rQTd4bph2FtBOUbozi5fX1/zDf1nKD8xk=";
+  };
+
+  cargoRoot = "src/_bcrypt";
+  cargoDeps = rustPlatform.fetchCargoTarball {
+    inherit src;
+    sourceRoot = "${pname}-${version}/${cargoRoot}";
+    name = "${pname}-${version}";
+    hash = "sha256-HvfRLyUhlXVuvxWrtSDKx3rMKJbjvuiMcDY6g+pYFS0=";
   };
 
   nativeBuildInputs = [
     setuptools
-  ];
+    setuptools-rust
+    rustPlatform.cargoSetupHook
+  ] ++ (with rustPlatform; [
+    rust.cargo
+    rust.rustc
+  ]);
 
   propagatedBuildInputs = [
-    six
     cffi
   ];