mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity Swati KhandelwalNov 03, 2026Password Security / Incident Response Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removing passkeys. The warning came in an email sent on November 3 in the name of developer mSeven Software. It says the company recently learned of suspicious activity linked to the app but does not say what happened or whether anyone's stored data was exposed. The email says it went to current and former mSecure customers. A customer who received it posted its text in a thread on mSecure's support forum on November 3. As of 18:00 UTC on November 3, mSeven had posted nothing about the email on mSecure's X and Facebook accounts. No staff member had replied in that forum thread. The email says mSeven started an investigation, took steps to limit the problem and brought in outside cybersecurity experts. It does not name the systems involved, say when the activity happened or whether it has stopped, or give the number of people who received the email. mSecure can sync a customer's vault through mSecure Cloud, Dropbox, iCloud or Wi-Fi. The email does not say whether it matters which of these a customer uses. mSecure 7 can keep passkeys and 2FA codes in the vault next to passwords, on its Essentials plan and above. The email's advice is about protecting information stored in mSecure. The email does not say whether the 2FA and passkey steps cover those stored items, the mSecure account's own sign-in, or both. mSecure says vault data is encrypted on the customer's device before it is synced, and that even its developers cannot access customers' information. In mSecure 6.1.5 for Android, mSeven could, in theory, access stored data, according to Germany's Federal Office for Information Security (BSI), which found this in a study published in December 2025. The BSI tested only that version, and its results may have changed with later updates. The email does not say whether the suspicious activity reached vault data or the keys that protect it. The email offers its steps as possibilities and does not say which accounts to deal with first or how to carry out each step. It also does not say whether customers should keep using mSecure, including to store their new passwords. As of 18:00 UTC on November 3, the newest iPhone version of mSecure in Apple's App Store was 7.1.0, released on October 23. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. Authentication, cybersecurity, data security, Incident response, password security Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor AI-Generated Fake Login Pages Are Making Account Takeovers Easier PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets Assess Your Organization's AI Code Sprawl Exposure With This Practical Guide See How Bitdefender GravityZone Identifies Shadow AI and Prioritizes Endpoint Risks Beyond CVE Scanning: Book a Demo of Continuous AI-Powered Web Pentesting Detect Lateral Movement and Evasive Attacks With Corelight's Open NDR Platform Your SOC Has an Identity Blind Spot. Here's How to Fix It Learn how to close critical identity visibility gaps in your SOC, detect hidden threats, and accelerate incident response across human, machine, and AI identities. Join the Experts Roadmap for AI-Ready Security Operations Evaluate Attack Surface Visibility With an AI Threat Readiness Framework Learn how to assess AI threat readiness, strengthen attack surface visibility, and prepare security operations for emerging threats in this practical webinar. Uncover Identity Dark Matter: SACR Research Brief Eliminate the blind spots undermining your security. Download the SACR brief. BeyondTrust an 8X Gartner® Magic Quadrant™ Leader for PAM Gain clarity on the PAM market and understand why BeyondTrust is again a Leader. 11 Real Stories: How Identity Exposure Unlocks Active Attack Paths Map cross-domain privilege escalation to sever breach routes at key choke points. Governance Sets the Ceiling on Your AI Security Program See the five moves that raise a Stage 2 Govern score to a defensible Stage 3. PEDM vs. Standing Elevated Privileges: Control Access Without Flooding the Helpdesk The MSP Margin Math Nobody's Doing: Your Next Technician Might Already be on Payroll Your Backup Isn't Ransomware-Proof Just Because It Exists Why Root and Jailbreak Detection Alone Cannot Guarantee Mobile App Security