diff --git a/packages/access-client/package.json b/packages/access-client/package.json
index 8e6d1cc23..8ca2ee14d 100644
--- a/packages/access-client/package.json
+++ b/packages/access-client/package.json
@@ -110,7 +110,7 @@
     "bigint-mod-arith": "^3.1.2",
     "conf": "11.0.2",
     "multiformats": "^12.1.2",
-    "one-webcrypto": "https://github.com/web3-storage/one-webcrypto",
+    "one-webcrypto": "git+https://git@github.com/web3-storage/one-webcrypto.git",
     "p-defer": "^4.0.0",
     "type-fest": "^4.9.0",
     "uint8arrays": "^4.0.6",
diff --git a/packages/blob-index/package.json b/packages/blob-index/package.json
index 9a7bd2da6..17ae82c67 100644
--- a/packages/blob-index/package.json
+++ b/packages/blob-index/package.json
@@ -52,7 +52,7 @@
     "@web3-storage/eslint-config-w3up": "workspace:^",
     "c8": "^7.14.0",
     "entail": "^2.1.2",
-    "one-webcrypto": "git://github.com/web3-storage/one-webcrypto",
+    "one-webcrypto": "git+https://git@github.com/web3-storage/one-webcrypto.git",
     "typescript": "5.2.2"
   },
   "eslintConfig": {
diff --git a/packages/filecoin-api/package.json b/packages/filecoin-api/package.json
index 95439ecc7..20b605206 100644
--- a/packages/filecoin-api/package.json
+++ b/packages/filecoin-api/package.json
@@ -176,7 +176,7 @@
     "c8": "^10.1.2",
     "mocha": "^10.2.0",
     "multiformats": "^12.1.2",
-    "one-webcrypto": "git://github.com/web3-storage/one-webcrypto",
+    "one-webcrypto": "git+https://git@github.com/web3-storage/one-webcrypto.git",
     "p-wait-for": "^5.0.2",
     "typescript": "5.2.2"
   },
diff --git a/packages/upload-api/package.json b/packages/upload-api/package.json
index e188ee585..27c5224af 100644
--- a/packages/upload-api/package.json
+++ b/packages/upload-api/package.json
@@ -218,7 +218,7 @@
     "@web3-storage/sigv4": "^1.0.2",
     "is-subset": "^0.1.1",
     "mocha": "^10.2.0",
-    "one-webcrypto": "git://github.com/web3-storage/one-webcrypto",
+    "one-webcrypto": "git+https://git@github.com/web3-storage/one-webcrypto.git",
     "typescript": "5.2.2"
   },
   "eslintConfig": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1ab2278f0..df9e61414 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -91,8 +91,8 @@ importers:
         specifier: ^12.1.2
         version: 12.1.3
       one-webcrypto:
-        specifier: https://github.com/web3-storage/one-webcrypto
-        version: https://codeload.github.com/web3-storage/one-webcrypto/tar.gz/5148cd14d5489a8ac4cd38223870e02db15a2382
+        specifier: git+https://git@github.com/web3-storage/one-webcrypto.git
+        version: git+https://git@github.com/web3-storage/one-webcrypto.git#5148cd14d5489a8ac4cd38223870e02db15a2382
       p-defer:
         specifier: ^4.0.0
         version: 4.0.1
@@ -186,8 +186,8 @@ importers:
         specifier: ^2.1.2
         version: 2.1.2
       one-webcrypto:
-        specifier: git://github.com/web3-storage/one-webcrypto
-        version: https://codeload.github.com/web3-storage/one-webcrypto/tar.gz/5148cd14d5489a8ac4cd38223870e02db15a2382
+        specifier: git+https://git@github.com/web3-storage/one-webcrypto.git
+        version: git+https://git@github.com/web3-storage/one-webcrypto.git#5148cd14d5489a8ac4cd38223870e02db15a2382
       typescript:
         specifier: 5.2.2
         version: 5.2.2
@@ -344,8 +344,8 @@ importers:
         specifier: ^12.1.2
         version: 12.1.3
       one-webcrypto:
-        specifier: git://github.com/web3-storage/one-webcrypto
-        version: https://codeload.github.com/web3-storage/one-webcrypto/tar.gz/5148cd14d5489a8ac4cd38223870e02db15a2382
+        specifier: git+https://git@github.com/web3-storage/one-webcrypto.git
+        version: git+https://git@github.com/web3-storage/one-webcrypto.git#5148cd14d5489a8ac4cd38223870e02db15a2382
       p-wait-for:
         specifier: ^5.0.2
         version: 5.0.2
@@ -493,8 +493,8 @@ importers:
         specifier: ^10.2.0
         version: 10.4.0
       one-webcrypto:
-        specifier: git://github.com/web3-storage/one-webcrypto
-        version: https://codeload.github.com/web3-storage/one-webcrypto/tar.gz/5148cd14d5489a8ac4cd38223870e02db15a2382
+        specifier: git+https://git@github.com/web3-storage/one-webcrypto.git
+        version: git+https://git@github.com/web3-storage/one-webcrypto.git#5148cd14d5489a8ac4cd38223870e02db15a2382
       typescript:
         specifier: 5.2.2
         version: 5.2.2
@@ -5236,8 +5236,8 @@ packages:
   one-webcrypto@1.0.3:
     resolution: {integrity: sha512-fu9ywBVBPx0gS9K0etIROTiCkvI5S1TDjFsYFb3rC1ewFxeOqsbzq7aIMBHsYfrTHBcGXJaONXXjTl8B01cW1Q==}
 
-  one-webcrypto@https://codeload.github.com/web3-storage/one-webcrypto/tar.gz/5148cd14d5489a8ac4cd38223870e02db15a2382:
-    resolution: {tarball: https://codeload.github.com/web3-storage/one-webcrypto/tar.gz/5148cd14d5489a8ac4cd38223870e02db15a2382}
+  one-webcrypto@git+https://git@github.com/web3-storage/one-webcrypto.git#5148cd14d5489a8ac4cd38223870e02db15a2382:
+    resolution: {commit: 5148cd14d5489a8ac4cd38223870e02db15a2382, repo: https://git@github.com/web3-storage/one-webcrypto.git, type: git}
     version: 1.0.3
 
   onetime@5.1.2:
@@ -13079,7 +13079,7 @@ snapshots:
 
   one-webcrypto@1.0.3: {}
 
-  one-webcrypto@https://codeload.github.com/web3-storage/one-webcrypto/tar.gz/5148cd14d5489a8ac4cd38223870e02db15a2382: {}
+  one-webcrypto@git+https://git@github.com/web3-storage/one-webcrypto.git#5148cd14d5489a8ac4cd38223870e02db15a2382: {}
 
   onetime@5.1.2:
     dependencies: