diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 33e5284..80191d6 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -15,9 +15,22 @@ jobs:
     permissions:
       id-token: write
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
-    - uses: rust-lang/crates-io-auth-action@b7e9a28eded4986ec6b1fa40eeee8f8f165559ec  # v1.0.3
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
+    - uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18  # v1.0.5
       id: auth
     - run: cargo publish --package trussed-auth
       env:
         CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
+  publish-trussed-auth-backend:
+    runs-on: ubuntu-latest
+    if: ${{ startsWith(github.event.release.tag_name, 'backend-') }}
+    environment: crates.io
+    permissions:
+      id-token: write
+    steps:
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
+    - uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18  # v1.0.5
+      id: auth
+    - run: cargo publish --package trussed-auth-backend
+      env:
+        CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
diff --git a/backend/CHANGELOG.md b/backend/CHANGELOG.md
index 7e61525..791edb6 100644
--- a/backend/CHANGELOG.md
+++ b/backend/CHANGELOG.md
@@ -13,11 +13,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 -
 
-## [0.2.0-rc.1][] - 2026-06-09
+## [0.2.0][] - 2026-07-22
 
-[0.2.0-rc.1]: https://github.com/trussed-dev/trussed-auth/releases/tag/backend-v0.2.0-rc.1
+[0.2.0]: https://github.com/trussed-dev/trussed-auth/releases/tag/backend-v0.2.0
 
-- Update to `trussed` v0.2.0-rc.1
+- Update to `trussed` v0.2.0
 
 ## [0.1.0][] - 2026-03-23
 
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index b96e5d0..8a0e680 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -3,7 +3,7 @@
 
 [package]
 name = "trussed-auth-backend"
-version = "0.2.0-rc.1"
+version = "0.2.0"
 description = "Authentication backend for Trussed"
 authors.workspace = true
 edition.workspace = true
@@ -23,15 +23,15 @@ rand_core = "0.6.4"
 serde-byte-array = "0.1.2"
 sha2 = { version = "0.10.6", default-features = false }
 subtle = { version = "2.4.1", default-features = false }
-trussed = { version = "=0.2.0-rc.1", default-features = false, features = ["crypto-client", "filesystem-client", "hmac-sha256", "serde-extensions"] }
+trussed = { version = "0.2", default-features = false, features = ["crypto-client", "filesystem-client", "hmac-sha256", "serde-extensions"] }
 trussed-auth = "0.5"
 
 [dev-dependencies]
-admin-app = { git = "https://github.com/Nitrokey/admin-app.git", tag = "v0.1.0-nitrokey.22", features = ["migration-tests"] }
+admin-app = { version = "0.2", features = ["migration-tests"] }
 heapless-bytes = "0.5"
 hex-literal = "0.4.1"
 quickcheck = { version = "1.0.3", default-features = false }
 rand_core = { version = "0.6.4", default-features = false, features = ["getrandom"] }
 serde_cbor = { version = "0.11.2", features = ["std"] }
 serde_test = "1.0.176"
-trussed = { version = "=0.2.0-rc.1", default-features = false, features = ["crypto-client", "filesystem-client", "hmac-sha256", "serde-extensions", "virt"] }
+trussed = { version = "0.2", default-features = false, features = ["crypto-client", "filesystem-client", "hmac-sha256", "serde-extensions", "virt"] }