mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it. This includes changing passwords, resetting two-factor authentication (2FA), and removing passkeys. 🚨
The warning was issued in an email sent on November 3 by the developer mSeven Software. The company recently learned of suspicious activity linked to the app but did not disclose the specifics of the incident or whether any stored data was exposed.
The email reached current and former mSecure customers, with one recipient sharing its contents on mSecure’s support forum on the same day. As of 18:00 UTC on November 3, mSeven had not posted any updates regarding the email on mSecure’s X and Facebook accounts, nor had any staff member responded in the forum thread.
According to the email, mSeven has initiated an investigation, taken steps to mitigate the issue, and engaged outside cybersecurity experts. However, it does not specify which systems were involved, when the suspicious activity occurred, or if it has ceased. Additionally, the number of recipients of the email remains undisclosed.
mSecure allows users to sync their vault through mSecure Cloud, Dropbox, iCloud, or Wi-Fi, but the email does not clarify if the choice of sync method affects the situation.
The email advises users to protect their information stored in mSecure, but it does not specify whether the 2FA and passkey measures apply to the stored items, the mSecure account’s sign-in, or both.
mSecure claims that vault data is encrypted on the customer’s device before syncing, ensuring that even its developers cannot access customers’ information. However, a study by Germany’s Federal Office for Information Security (BSI) indicated that in mSecure 6.1.5 for Android, mSeven could theoretically access stored data. This finding was published in December 2025, and the results may have changed with subsequent updates.
The email does not clarify whether the suspicious activity impacted vault data or the keys that protect it.
What the Email Asks Customers to Do:
The email provides steps as suggestions without specifying which accounts to prioritize or how to execute each step. It also does not indicate whether customers should continue using mSecure to store their new passwords.
As of 18:00 UTC on November 3, the latest iPhone version of mSecure available in Apple’s App Store was 7.1.0, released on October 23.