diff --git a/security/lego/Makefile b/security/lego/Makefile
index 995ad4070b1e..d3bb5a5199ff 100644
--- a/security/lego/Makefile
+++ b/security/lego/Makefile
@@ -1,43 +1,42 @@
 PORTNAME=	lego
 DISTVERSIONPREFIX=	v
-DISTVERSION=	4.15.0
-PORTREVISION=	1
+DISTVERSION=	4.16.1
 CATEGORIES=	security
 
 MAINTAINER=	matt@matthoran.com
 COMMENT=	Let's Encrypt client and ACME library written in Go
 WWW=		https://github.com/go-acme/lego
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 
-USES=		go:modules
+USES=		go:1.21,modules
 GO_MODULE=	github.com/go-acme/lego/v4
 GO_TARGET=	./cmd/lego
 GO_BUILDFLAGS=	-ldflags '-X "main.version=${DISTVERSION}"'
 
 SAMPLE_FILES=	deploy.sh.sample lego.sh.sample
 SUB_FILES=	${SAMPLE_FILES} 604.lego pkg-message
 SUB_LIST=	LEGO_USER=${LEGO_USER} \
 		PORTNAME=${PORTNAME}
 
 LEGO_USER?=	_lego
 
 USERS=		${LEGO_USER}
 GROUPS=		${LEGO_USER}
 
 PERIODIC_DIRS=	etc/periodic/weekly
 PERIODIC_FILES=	604.lego
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}
 	${INSTALL_SCRIPT} ${WRKDIR}/${PERIODIC_FILES} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}/${PERIODIC_FILES}
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/ssl/lego \
 		${STAGEDIR}${ETCDIR} ${STAGEDIR}${WWWDIR}
 .	for d in ${SAMPLE_FILES}
 		${INSTALL_SCRIPT} ${WRKDIR}/${d} ${STAGEDIR}${ETCDIR}/${d}
 .	endfor
 
 .include <bsd.port.mk>
diff --git a/security/lego/distinfo b/security/lego/distinfo
index 9fa0d7410096..58407505cb55 100644
--- a/security/lego/distinfo
+++ b/security/lego/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1707427934
-SHA256 (go/security_lego/lego-v4.15.0/v4.15.0.mod) = 59ddfb4add0d4d7eb51a4fca572efd6297f300fd7a4d33609286fd52f1205233
-SIZE (go/security_lego/lego-v4.15.0/v4.15.0.mod) = 8487
-SHA256 (go/security_lego/lego-v4.15.0/v4.15.0.zip) = 68834f3f15cabbb545aba779c2b2bddf133ad58f247782a51cfb7f0c134bcfac
-SIZE (go/security_lego/lego-v4.15.0/v4.15.0.zip) = 1206285
+TIMESTAMP = 1710514580
+SHA256 (go/security_lego/lego-v4.16.1/v4.16.1.mod) = 57365553d8f45eca3e7a5689fcdbd258bccb71fe840968ac4fe5b60918e6766e
+SIZE (go/security_lego/lego-v4.16.1/v4.16.1.mod) = 8587
+SHA256 (go/security_lego/lego-v4.16.1/v4.16.1.zip) = a81faba288beca1ae8dffbb2ad3d6d2aad6920e1b8da813163b96d8947a27c65
+SIZE (go/security_lego/lego-v4.16.1/v4.16.1.zip) = 1238940