Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removing passkeys.
The warning came in an email sent on November 3 in the name of developer mSeven Software. It says the company recently learned of suspicious activity linked to the app but does not say what happened or whether anyone's stored data was exposed.
The email says it went to current and former mSecure customers. A customer who received it posted its text in a thread on mSecure's support forum on November 3.
As of 18:00 UTC on November 3, mSeven had posted nothing about the email on mSecure's X and Facebook accounts. No staff member had replied in that forum thread.
The email says mSeven started an investigation, took steps to limit the problem and brought in outside cybersecurity experts. It does not name the systems involved, say when the activity happened or whether it has stopped, or give the number of people who received the email.
mSecure can sync a customer's vault through mSecure Cloud, Dropbox, iCloud or Wi-Fi. The email does not say whether it matters which of these a customer uses.
mSecure 7 can keep passkeys and 2FA codes in the vault next to passwords, on its Essentials plan and above. The email's advice is about protecting information stored in mSecure. The email does not say whether the 2FA and passkey steps cover those stored items, the mSecure account's own sign-in, or both.
Source link







