mSecure urges users to change passwords after suspicious activity

mSecure, the password manager from mSeven Software, has warned current and former customers to take action after detecting “suspicious activity” tied to the mSecure app.

The notice, published on 3 November by The Hacker News and cited by Malwarebytes, says mSeven “recently learned of suspicious activity,” and that it “launched an investigation, took steps to mitigate the issue, and engaged external cybersecurity experts.” However, the communication provides no details about what happened, when it occurred, which systems were affected, or whether customer data was accessed.

The warning asks users to “immediately take steps to protect all confidential information” and notes actions that may include changing passwords, resetting or re-enrolling two-factor authentication, or removing existing passkeys. Malwarebytes stresses that the scope of the incident remains unknown, and reports that The Register has also noted the company did not explain whether customers’ secrets were exposed.

In its own guidance, Malwarebytes advises prioritising important accounts and proceeding with credential changes through official services, reviewing two‑factor authentication stored in the vault, and handling passkeys with caution until mSeven provides further information. The article notes the uncertainty around saving new credentials in mSecure and suggests temporarily using a different password manager if needed. The update states it will report further if more details emerge.