mSecure Developer Recommends Changing Passwords After Suspicious Activity

The American company mSeven Software, developer of the password manager mSecure, warned users on November 3, 2026, about suspicious activity related to the application. The company recommended taking measures to protect confidential data, including possibly changing passwords, reconfiguring two-factor authentication, and deleting access keys.

According to a letter seen by The Register, mSeven has initiated an investigation, taken steps to limit the potential consequences of the incident, and engaged external cybersecurity specialists. However, the developer did not specify what the suspicious activity entailed, when it occurred, or whether outsiders gained access to user information.

In the notification, the company stated: “Given the potential security implications, mSeven recommends immediately taking steps to protect all confidential information stored in the mSecure password management application.” Possible actions include changing passwords, resetting or reconfiguring two-factor authentication, and deleting existing access keys.

The warning raised questions among users, who are discussing the situation on the mSecure support forum and Reddit platform. One client, storing over 800 passwords, inquired whether it was necessary to change them all. Another user with more than 500 saved passwords asked for clarification on whether the recommendations applied to all methods of two-factor authentication and access keys associated with their accounts or just the security measures of mSecure itself.

Users are demanding more specific information from the developer about the nature of the incident and the necessary protective measures. According to The Register, mSeven has not responded to the editorial inquiries. At the time of the source's publication, it remained unknown which specific data might have been at risk and whether any confidential user information was compromised at all.