Password manager mSecure tells users to change passwords, won't say why

Password manager mSecure has alerted its users to change their passwords, reset two-factor authentication, and potentially remove their passkeys following the detection of suspicious activity within its application. However, the company has yet to disclose the nature of the suspicious activity, when it occurred, or if any customer data was accessed.

In an email to customers sent on November 3, mSeven Software, the US-based developer behind mSecure, stated that it launched an investigation after noticing something amiss with the password management application. The company engaged external cybersecurity experts to assist in their inquiry. Despite the lack of clarity surrounding the incident, mSeven advises users to take the matter seriously and take immediate steps to protect any confidential information stored in the application.

This may involve changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys. Customers with hundreds of saved passwords may find this process laborious, and without knowing the specifics of the breach, it is unclear which credentials need to be replaced. The warning has generated frustration among users, who have called for more context and information from the company.

Reddit users have also shared the notification, expressing confusion about whether the advice applies to all passkeys and two-factor authentication methods associated with their accounts. mSeven has not provided further details about the incident, leaving customers to speculate whether their data has actually been compromised or if the company is simply taking a cautious approach.