Users of the mSecure password manager are being urged to take precautionary steps to protect sensitive information stored in their digital vaults following a warning from the software’s developer, mSeven Software.
In an email sent on November 3, the company alerted current and former mSecure customers to suspicious activity associated with the application. However, the notification provided few details about the incident and did not confirm whether customer passwords, personal information, or other stored data had been compromised.
The recommended precautionary measures include changing passwords, resetting two-factor authentication (2FA), and removing passkeys.
mSeven Software Investigating Suspicious Activity
The warning email, reportedly sent in the name of mSeven Software, said the company had recently become aware of suspicious activity and had launched an investigation.
According to the notification, mSeven has taken steps to contain the issue and engaged external cybersecurity specialists to help investigate the incident.
However, several important details remain unknown. The company has not identified the affected systems, explained when the suspicious activity occurred, or confirmed whether the threat has been contained.
It has also not disclosed whether customer vaults were accessed or how many users received the security notification.
A customer who received the email shared its contents in a discussion on mSecure’s official support forum on November 3. At 18:00 UTC that day, mSeven had not published a corresponding announcement on its official X or Facebook accounts, and no company representative had responded to the forum discussion.
Which mSecure Data Could Be at Risk?
mSecure allows users to store sensitive information, including passwords and other confidential credentials, in an encrypted digital vault.
The application supports several synchronization options, including:
- mSecure Cloud
- Dropbox
- Apple iCloud
- Wi-Fi synchronization
The company’s email did not clarify whether the suspicious activity affected a particular synchronization service or whether users of all synchronization methods could be impacted.
Another important consideration is that mSecure 7 supports storing passkeys and two-factor authentication codes directly inside the password vault. These features are available with the Essentials plan and higher.
The security notification recommends changing passwords, resetting 2FA, and removing passkeys. However, it does not explain whether these instructions apply to credentials stored inside the vault, authentication methods used to access mSecure accounts, or both.
Questions About mSecure’s Encryption Security
mSecure states that customer vault information is encrypted locally on the user’s device before synchronization. According to the company, even its developers cannot access customers’ stored information.
Nevertheless, the latest warning raises questions about whether the suspicious activity could have affected encrypted vault data, encryption keys, or other systems involved in protecting customer information.
There is also a relevant security finding involving an older version of the Android application.
In a study published in December 2025, Germany’s Federal Office for Information Security (BSI) reported that mSeven could theoretically access stored information in mSecure 6.1.5 for Android.
It is important to note that the BSI examined only that particular version. Its findings do not necessarily reflect the security of newer releases.
Furthermore, mSeven’s November 3 email does not establish whether the reported suspicious activity involved vault contents or the cryptographic keys used to protect them.
What Should mSecure Users Do Now?
Although mSeven has not provided detailed instructions for responding to the incident, its notification suggests that customers should consider taking additional precautions.
The recommended measures include:
- Change important passwords: Consider updating passwords for sensitive accounts, particularly those stored in mSecure.
- Reset two-factor authentication: Review and reset 2FA configurations where appropriate, especially for accounts containing sensitive information.
- Remove stored passkeys: Consider removing existing passkeys and reviewing their security before setting them up again.
- Monitor important accounts: Watch for unexpected login attempts, password reset notifications, or other suspicious activity.
- Follow official security updates: Look for further instructions from mSeven Software as more information about the investigation becomes available.
The company has not specified which accounts customers should prioritize or explained whether users should continue using mSecure to store newly generated passwords while the investigation is ongoing.
Users should also avoid assuming that changing their mSecure account password alone will necessarily protect every credential stored in their vault.
Latest mSecure App Version
At 18:00 UTC on November 3, the latest version of mSecure available for iPhone users through Apple’s App Store was version 7.1.0, released on October 23.
However, the security notification did not identify a vulnerable application version or recommend a specific software update as part of its response.
What We Know So Far
The November 3 notification has raised concerns among mSecure customers, particularly because the company has not yet provided a detailed explanation of the suspicious activity.
While mSeven says it has launched an investigation, taken containment measures, and brought in external cybersecurity experts, important questions remain unanswered.
For now, customers should treat the recommended security measures seriously, review the protection of their most important accounts, and watch for further clarification from mSeven Software.
The key unanswered question is whether the suspicious activity resulted in unauthorized access to customer vaults or exposed any information stored within them.
