diff --git a/security/py-pyotp2289/Makefile b/security/py-pyotp2289/Makefile
index c45e02e2728c..3e9a477659a2 100644
--- a/security/py-pyotp2289/Makefile
+++ b/security/py-pyotp2289/Makefile
@@ -1,20 +1,22 @@
 PORTNAME=	pyotp2289
-PORTVERSION=	1.2.1
-PORTREVISION=	1
+PORTVERSION=	2.0.0
 CATEGORIES=	security python
 MASTER_SITES=	PYPI
 PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
 
 MAINTAINER=	sgs@pichove.org
 COMMENT=	Pure Python implementation of RFC-2289 - "A One-Time Password System"
-WWW=		https://github.com/blackm0re/pyotp2289
+WWW=		https://codeberg.org/sgs/pyotp2289
 
 LICENSE=	BSD2CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
+BUILD_DEPENDS=	${PYTHON_PKGNAMEPREFIX}setuptools>=0:devel/py-setuptools@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR}
+
 USES=		python
-USE_PYTHON=	autoplist concurrent distutils pytest
+USE_PYTHON=	autoplist concurrent pep517 pytest
 
 NO_ARCH=	yes
 
 .include <bsd.port.mk>
diff --git a/security/py-pyotp2289/distinfo b/security/py-pyotp2289/distinfo
index ee3ba248fcdf..d6c069298533 100644
--- a/security/py-pyotp2289/distinfo
+++ b/security/py-pyotp2289/distinfo
@@ -1,3 +1,3 @@
 TIMESTAMP = 1648922236
-SHA256 (pyotp2289-1.2.1.tar.gz) = e281f485db71bf741c7ac902235e843da9f42d41a42c5f8cfc09da8cfdffda26
-SIZE (pyotp2289-1.2.1.tar.gz) = 30629
+SHA256 (pyotp2289-2.0.0.tar.gz) = 985950ae0d26c1dedd0ddd534fbe71eba31f34a7c1bdb913f8a69edb0b482ea9
+SIZE (pyotp2289-2.0.0.tar.gz) = 32070
diff --git a/security/py-pyotp2289/files/patch-pyproject.toml b/security/py-pyotp2289/files/patch-pyproject.toml
new file mode 100644
index 000000000000..f41454d56b66
--- /dev/null
+++ b/security/py-pyotp2289/files/patch-pyproject.toml
@@ -0,0 +1,21 @@
+--- pyproject.toml.orig	2026-04-28 08:51:52 UTC
++++ pyproject.toml
+@@ -1,8 +1,5 @@
+ [build-system]
+-requires = [
+-    "setuptools >= 77.0.3",
+-    "wheel"
+-]
++requires = ["setuptools >=61"]
+ 
+ build-backend = "setuptools.build_meta"
+ 
+@@ -11,7 +8,7 @@ dynamic = ["version"]
+ name = "pyotp2289"
+ description = "A pure Python implementation of 'A One-Time Password System'"
+ dynamic = ["version"]
+-license = "BSD-2-Clause"
++license = { text = "BSD-2-Clause" }
+ authors = [{name = "Simeon Simeonov"}]
+ readme = "README.md"
+ requires-python = ">= 3.10"