diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5702560..4a956e5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -61,6 +61,10 @@ and a release's notes are its section. The procedure is in [`docs/RELEASING.md`]
   such as `look;connect …`, is shown as `(credential command hidden)` and is kept out of history; the game still gets
   the real line.
 
+- When a game hands echo back after a password prompt (telnet `WONT ECHO`), the client now confirms it with `DONT ECHO`,
+  and it no longer answers every repeated `WILL ECHO`, which two programs can bounce back and forth. (TelnetNegotiationCore
+  4.11.0, was 4.9.0.)
+
 - Desktop overlays follow modal visibility changes on the client UI thread, avoiding background-thread reads of changing pane layouts.
 
 - The desktop window answers terminal cell-pixel queries with its actual measured pixels, allowing
diff --git a/Directory.Packages.props b/Directory.Packages.props
index 8c63b8e..e26c438 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -10,7 +10,7 @@
     <PackageVersion Include="SharpConsoleUI" Version="2.7.8" />
 
     <!-- Telnet negotiation: TELOPT/NAWS/MTTS/EOR/CHARSET/MSSP/GMCP/MSDP/MCCP/MXP negotiation. -->
-    <PackageVersion Include="TelnetNegotiationCore" Version="4.9.0" />
+    <PackageVersion Include="TelnetNegotiationCore" Version="4.11.0" />
 
     <!-- The version, from the git tag (see Directory.Build.props). Build-time only. -->
     <PackageVersion Include="MinVer" Version="8.0.0" />