● Covered by 2 sources · 2 reportsMedium impact2 negative
mSecure Password Manager Advises Users to Change Passwords After Suspicious Activity
Key points
- mSecure notified users of suspicious activity on November 3.
- Users are advised to change passwords, reset 2FA, and remove passkeys.
- mSeven Software has not provided details on data exposure or incident scope.
- mSecure vaults are encrypted on-device before syncing.
- mSeven Software notified current and former mSecure users of the cyberattack.
- A hacker reportedly stole an encrypted customer database.
- mSeven Software engaged external cybersecurity experts to assist with the investigation.
Suspicious Activity Detected
mSeven Software, the developer of the mSecure password manager, sent an email to current and former customers on November 3, reporting suspicious activity related to the app. The email advised users to take protective measures, including changing passwords, resetting two-factor authentication (2FA), and removing passkeys associated with their accounts.
Lack of Specifics
The notification email did not specify the nature of the suspicious activity, when it occurred, or whether any user data was compromised. mSeven Software has not publicly commented on the incident on its social media channels or support forums as of November 3, 18:00 UTC. The company stated it has initiated an investigation and engaged external cybersecurity experts.
The email also did not clarify if the recommended actions apply to data stored within mSecure vaults, the mSecure account login itself, or both. It also did not specify whether the sync method (mSecure Cloud, Dropbox, iCloud, Wi-Fi) affects the risk.
Data Encryption and Past Findings
mSecure states that vault data is encrypted on the customer's device before syncing, preventing developers from accessing customer information. However, a December 2025 study by Germany's Federal Office for Information Security (BSI) on mSecure 6.1.5 for Android indicated that mSeven could theoretically access stored data in that specific version. It is unclear if this finding applies to current versions or if the suspicious activity impacted encrypted vault data or its keys.
User Recommendations
The email presented the protective steps as possibilities without prioritizing them or detailing how to execute each action. It also did not advise users on whether to continue using mSecure for storing new credentials. The latest iPhone version of mSecure, 7.1.0, was released on October 23.
Updates
- mSeven Software notified current and former mSecure users of the cyberattack.
- A hacker reportedly stole an encrypted customer database.
- mSeven Software engaged external cybersecurity experts to assist with the investigation.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
mSeven Software has notified current and former mSecure password manager users of a cyberattack involving the theft of an encrypted customer database. The company advises users to change passwords, reset two-factor authentication, and remove passkeys for accounts stored in the manager. This incident raises concerns despite mSecure's use of AES-256 encryption and a zero-knowledge architecture.
mSecure password manager has notified customers of suspicious activity linked to its app, urging them to change stored passwords, reset two-factor authentication, and remove passkeys. The company has not disclosed details about the incident, including whether user data was exposed or the nature of the suspicious activity.