diff --git a/package.json b/package.json
index eaf6fe3..4f1eb77 100644
--- a/package.json
+++ b/package.json
@@ -163,7 +163,7 @@
   ],
   "dependencies": {
     "esbuild": "0.23.0",
-    "jwt-decode": "^3.1.2",
+    "jwt-decode": "^4.0.0",
     "prettier": "3.2.5",
     "globals": "~15.9.0"
   },
diff --git a/src/browser/sync/authentication_manager.ts b/src/browser/sync/authentication_manager.ts
index b4493d3..842b151 100644
--- a/src/browser/sync/authentication_manager.ts
+++ b/src/browser/sync/authentication_manager.ts
@@ -1,6 +1,6 @@
 import { LocalSyncState } from "./local_state.js";
 import { AuthError, Transition } from "./protocol.js";
-import jwtDecode from "jwt-decode";
+import { jwtDecode } from "jwt-decode";
 
 // setTimout uses 32 bit integer, so it can only
 // schedule about 24 days in the future.