---
title: Password manager mSecure tells current and former customers to change passwords, reset 2FA and remove passkeys after 'suspicious activity', without saying what happened | ctxsec
url: https://ctxsec.com/items/msecure-mseven-suspicious-activity-email-change-passwords-reset-2fa-passkeys
description: "mSeven Software emailed current and former mSecure customers on Nov 3 saying it 'recently learned of suspicious activity associated with the mSecure password management application', launched an investigation, took mitigation steps and brought in outside experts. It recommends customers 'immediately take steps to protect all confidential information stored within' mSecure, which 'may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys.' It gives no cause, timing or scope."
status: "vendor customer email (Nov 3; text posted by customers on mSecure's own support forum and seen by The Register). mSeven has not said what happened or whether vault data was exposed"
published: 2026-11-03
---

> mSeven Software emailed current and former mSecure customers on Nov 3 saying it 'recently learned of suspicious activity associated with the mSecure password management application', launched an investigation, took mitigation steps and brought in outside experts. It recommends customers 'immediately take steps to protect all confidential information stored within' mSecure, which 'may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys.' It gives no cause, timing or scope.

[← Cybersecurity News](/news) · [markdown](/items/msecure-mseven-suspicious-activity-email-change-passwords-reset-2fa-passkeys.md)

vendor customer email (Nov 3; text posted by customers on mSecure's own support forum and seen by The Register). mSeven has not said what happened or whether vault data was exposed

2026-11-03

### Password manager mSecure tells current and former customers to change passwords, reset 2FA and remove passkeys after 'suspicious activity', without saying what happened

The advice to reset 2FA and passkeys suggests mSeven can't rule out exposure of what's stored in vaults, but that is an inference, not something the company has said. Customers on mSecure's support forum are asking for details; as of this writing there is no public statement beyond the email.

**If you use mSecure:** change the master password in the app, then rotate the highest-value accounts first (email, Apple/Google account, banking and payment, domain registrar and hosting). Re-enroll 2FA anywhere mSecure stores the TOTP secret, ideally moving it to a separate authenticator, and remove and recreate passkeys stored in mSecure. Expect fake 'mSecure breach' phishing; act only through the app or sites you type in yourself.

Sources: [mSecure Support forum: Important Security Notice Nov 3, 2026 (customer-posted email text)](https://support.msecure.com/en/support/discussions/topics/36000038999) · [The Register: Password manager mSecure tells users to change passwords, won't say why (Nov 3)](https://www.theregister.com/security/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why/5307296)