Customers of the mSecure password manager are being urged to act to protect the information they store in it. According to The Hacker News, an email sent on November 3 in the name of developer mSeven Software said the company had learned of suspicious activity linked to the app and suggested changing passwords, resetting two-factor authentication (2FA) and removing passkeys.
The email does not say what happened, which systems are involved, when the activity took place, whether it has stopped or whether vault data was exposed. It says the company started an investigation, took steps to limit the problem and brought in outside cybersecurity experts. As of 18:00 UTC on November 3, the company had posted nothing on its social media accounts. mSecure says vault data is encrypted on the device before syncing and that even its developers cannot access it.
What to do: current and former mSecure users should start with their most important accounts, such as email and banking, change those passwords, reset 2FA, remove and re-add passkeys, and watch for official updates from the company.