{
  "id": 17987225,
  "title": "Password manager mSecure tells users to change passwords, won't say why",
  "url": "https://urgent.news/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why-17987225",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-03T16:10:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why/5307296"
  },
  "original_language": "en",
  "account": "Password management application mSecure has alerted its users to alter their passwords, reconfigure two-factor authentication, and possibly eliminate their passkeys following the detection of unusual activity. However, the company has not disclosed the nature of this breach or whether any sensitive data has been compromised. In an email sent to users on November 3, mSecure's parent company, mSeven Software, disclosed that it initiated an inquiry following its discovery of suspicious activity within the mSecure password management application.\n\nmSeven Software swiftly conducted an investigation, implemented measures to contain the issue, and enlisted the assistance of external cybersecurity experts. The company has refrained from providing specifics regarding the nature of the suspicious activity, the timing of its occurrence, or whether any customer data was accessed. Despite this lack of clarity, mSeven Software has advised customers to take the matter seriously, urging them to promptly secure any confidential information stored within their mSecure password management application. This recommendation may entail changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys.\n\nThe email has generated significant frustration among customers, who have inundated mSecure's support forum demanding more information. One customer questioned why the company offered only vague advice, \"take steps,\" without specifying the necessary remedial action or the compromised data. Others have expressed concern about being expected to change all of their passwords, particularly those with hundreds of passwords stored in mSecure. A separate user inquired whether the warning extended to all two-factor authentication methods and passkeys associated with their accounts, or just those used for accessing mSecure itself.\n\nThe ambiguity surrounding the incident has also permeated online forums, with customers sharing the company's email and questioning the potential breach. mSeven Software has yet to provide a response to inquiries from The Register, leaving customers to speculate whether their data has indeed been compromised or if the company is merely exercising caution. For a business whose mission is to safeguard its users' secrets, this lack of transparency is far from reassuring. The email signature reads: \"We regret any inconvenience that this may cause. For customers contemplating hundreds of password resets, inconvenience may be putting it mildly.\"",
  "summary": "Customers left wondering what's been compromised after vendor advises resetting passwords, 2FA and passkeys",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}