mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity

mSecure, a password management service, has alerted its users to take immediate action to safeguard their sensitive data. This warning was sent out via email on November 3, claiming the company had detected suspicious activity within the app. The sender, mSeven Software, did not disclose the nature of the activity or whether any user data had been compromised.

The email instructed recipients to potentially alter their passwords, reset two-factor authentication (2FA), and eliminate passkeys stored within their mSecure vaults. It is unclear whether this advice applies to all forms of 2FA and passkey storage or only specific instances.

mSeven stated that they initiated an investigation and implemented measures to mitigate the issue, enlisting the help of external cybersecurity professionals. However, they have not disclosed any additional details about the incident, such as the systems involved, the timeline of the suspicious activity, or the number of affected users.

mSecure offers users the ability to sync their vaults through various platforms, including mSecure Cloud, Dropbox, iCloud, and Wi-Fi. The email did not specify which syncing method, if any, would be impacted by this warning. The Essentials plan of the mSecure 7 app can store passkeys and 2FA codes within the vault alongside passwords.

The email emphasized the importance of protecting the data stored within mSecure, but did not explicitly clarify if the 2FA and passkey steps included safeguarding these elements. The email also did not address whether customers should continue using mSecure to store their newly created passwords.

Users are advised to consider the email's recommendations, but the lack of concrete information leaves the specifics of the situation uncertain.