mSecure urges subscribers to reset passwords after suspicious activity

mSecure’s security notification has urged current and former subscribers to take rapid action after reports of suspicious activity within its ecosystem. The vendor told customers to secure all sensitive records stored in the app, change vault passwords, reconfigure two‑factor authentication, and delete active passkeys. The advisory has generated concern in the cybersecurity community, given the abrupt guidance to reset credentials across the platform.

The official bulletin provides limited technical detail, with little clarity on which internal networks or infrastructure, if any, were compromised. While mSecure has historically described its architecture as based on zero‑knowledge encryption, whereby client devices encrypt data locally with AES‑256 and service providers cannot decrypt stored passwords or tokens, analysts say the call for sweeping credential rotations seems inconsistent with that model.

Subscribers have turned to the company’s support forum for explanations, and there is broad discussion about whether unauthorised access may have involved unencrypted database archives. In response, the article counsels a systematic approach: prioritise changes to primary email accounts, then secure banking and cloud services, and finally cycle other sensitive credentials such as SSH keys and production API secrets.

It also recommends auditing recent authorisations, reviewing device lists, revoking unknown sessions, and ensuring recovery options remain accurate, with liaison to service helpdesks if anomalous activity is detected. The piece attributes these steps to the vendor’s advisory and to the surrounding subscriber discussions, as reported by Do Son for SecurityOnline[.]info on 4 November 2026.