mSecure Warns Users to Reset Passwords After Suspicious Activity

mSecure users are being asked to take precautionary steps after a communication from the company’s developer, mSeven Software, on 3 November 2026 warning of “suspicious activity” connected to the app. The notice does not specify what occurred or whether any vault data was exposed.

A customer who received the email shared its text on mSecure’s support forum, where staff had not yet replied by 18:00 UTC that day. mSeven said it had begun an investigation, implemented measures to limit the issue, and engaged external cybersecurity experts. The company did not identify the systems involved, nor did it state when the activity occurred, whether it has ceased, or how many customers were reached by the email.

The alert notes that mSecure 7 can sync vaults via mSecure Cloud, Dropbox, iCloud, or Wi‑Fi, and that the Essentials plan and above can store passkeys and 2FA codes alongside passwords. It also states that vault data is encrypted on the user’s device before syncing and that developers cannot access customer information.

A reference to Germany’s Federal Office for Information Security (BSI) from December 2025 is cited, noting that, in a test of mSecure 6.1.5 for Android, the BSI indicated the possibility that mSeven could access stored data, although this claim related to a prior version and may not reflect the current state. The email does not clarify whether the suspicious activity affected vault data or the keys protecting it, nor does it guide users on which accounts to prioritise for action. As of the same day, the latest iPhone version of mSecure in the App Store was 7.1.0, released on 23 October.