diff --git a/backend/app/auth.py b/backend/app/auth.py
index 593fe63..25fcf64 100644
--- a/backend/app/auth.py
+++ b/backend/app/auth.py
@@ -6,7 +6,8 @@ import httpx
 from fastapi import HTTPException, Security
 from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
 from jose import JWTError, jwk, jwt
-from pydantic import BaseModel, BaseSettings, Field, HttpUrl
+from pydantic import BaseModel, Field, HttpUrl
+from pydantic_settings import BaseSettings
 
 security = HTTPBearer(auto_error=False)
 
diff --git a/backend/requirements.txt b/backend/requirements.txt
index 89df5a9..160276c 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -1,6 +1,6 @@
 fastapi==0.109.0
 uvicorn[standard]==0.23.2
-# Allow any 0.28.x httpx compatible with Python 3.12; exact 0.28.4 may not be available
 httpx==0.28.1
 python-jose[cryptography]==3.3.0
 pydantic==2.8.0
+pydantic-settings==2.4.0