mSecure Password Manager Users Told to Change Passwords and Reset 2FA After Suspicious Activity

Customers of the mSecure password manager are being urged to protect the information stored in it. An email sent on November 3 in the name of developer mSeven Software says the company recently learned of suspicious activity linked to the app. It suggests customers may want to change passwords, reset two-factor authentication (2FA) and remove passkeys. The email went to current and former customers, and one recipient posted its text on mSecure's support forum. As of 18:00 UTC that day, mSeven had posted nothing about it on X or Facebook, and no staff member had replied in the forum thread.

The email says mSeven started an investigation, took steps to limit the problem and brought in outside cybersecurity experts. Many key details are missing. It does not say what happened, which systems were involved, when the activity occurred, whether it has stopped, or how many people were affected. It also does not say whether vault data or the keys protecting it were reached, whether the 2FA and passkey steps apply to items stored in the vault or to the mSecure account sign-in, or whether customers should keep using mSecure to store new passwords.

mSecure says vault data is encrypted on the customer's device before syncing, and that even its developers cannot access it. However, Germany's Federal Office for Information Security (BSI) found in a December 2025 study that mSeven could, in theory, access stored data in mSecure 6.1.5 for Android. The BSI tested only that version, and later updates may have changed the results.