diff --git a/composer.json b/composer.json
index 237a7ef77954..a11afb1b5061 100644
--- a/composer.json
+++ b/composer.json
@@ -60,13 +60,13 @@
         "google/proto-client": "^0.20.1",
         "google/gax": "^0.20.1",
         "symfony/lock": "3.3.x-dev#1ba6ac9",
-        "phpseclib/phpseclib": "^2.0"
+        "phpseclib/phpseclib": "^2"
     },
     "suggest": {
         "google/gax": "Required to support gRPC",
         "google/proto-client-php": "Required to support gRPC",
         "symfony/lock": "Required for the Spanner cached based session pool. Please require the following commit: 3.3.x-dev#1ba6ac9",
-        "phpseclib/phpseclib": "May be used in place of OpenSSL for creating signed Cloud Storage URLs."
+        "phpseclib/phpseclib": "May be used in place of OpenSSL for creating signed Cloud Storage URLs. Please require version ^2."
     },
     "autoload": {
         "psr-4": {
diff --git a/src/Storage/composer.json b/src/Storage/composer.json
index 3e4b81f2c6cd..f0db0ca02ecc 100644
--- a/src/Storage/composer.json
+++ b/src/Storage/composer.json
@@ -6,6 +6,9 @@
     "require": {
         "google/cloud-core": "^1.0"
     },
+    "suggest": {
+        "phpseclib/phpseclib": "May be used in place of OpenSSL for creating signed Cloud Storage URLs. Please require version ^2."
+    },
     "extra": {
         "component": {
             "id": "cloud-storage",