diff --git a/contrib/requirements/requirements-build-android.txt b/contrib/requirements/requirements-build-android.txt
index c9e79d5bd191..82aa6ad7618f 100644
--- a/contrib/requirements/requirements-build-android.txt
+++ b/contrib/requirements/requirements-build-android.txt
@@ -9,7 +9,8 @@ sh
 
 # needed by python-for-android:
 appdirs
-colorama>=0.3.3
+# colorama upper bound to avoid needing hatchling
+colorama>=0.3.3,<0.4.6
 jinja2
 sh>=1.10
 pep517
diff --git a/contrib/requirements/requirements-hw.txt b/contrib/requirements/requirements-hw.txt
index 3ec9a156bb8a..7343f21af8e0 100644
--- a/contrib/requirements/requirements-hw.txt
+++ b/contrib/requirements/requirements-hw.txt
@@ -15,3 +15,8 @@ pyserial>=3.5.0,<4.0.0
 # prefer older protobuf (see #7922)
 # (pulled in via e.g. keepkey and bitbox02)
 protobuf>=3.12,<4
+
+# prefer older colorama to avoid needing hatchling
+# (pulled in via trezor -> click -> colorama)
+# (pulled in via safet -> click -> colorama)
+colorama<0.4.6