Password manager mSecure tells users to change passwords, won't say why

What happened

On November 3, 2026, mSeven Software, the US company behind mSecure, emailed customers. It said it had seen suspicious activity linked to the app. It started an investigation and called in outside cybersecurity experts. It asked users to change passwords, reset two-factor authentication, and possibly remove passkeys. It did not say what the activity was, when it happened, or whether attackers got into customer data.

Key facts

• The warning was sent by email on November 3, 2026.
• Customers were told to take steps to protect all confidential information stored in mSecure.
• One customer said they had over 800 passwords saved in the app.
• Another customer said they had more than 500 saved passwords.
• mSeven has not yet answered questions from The Register.

Why this is confusing

A password manager is an app that stores many logins in one safe place. Two-factor authentication (2FA) adds a second check, like a code sent to your phone. A passkey is a login method that uses your device instead of a typed password. Because mSecure holds so many secrets, a breach would be serious. But users cannot tell which logins are at risk, so changing everything may be the only safe choice.

Why it matters

A password manager is meant to keep secrets safe. When the company does not explain the problem, customers are left to guess. Some may need to spend hours or days changing logins. Others may not know if they are at risk at all. This story shows why clear, fast details matter when a security tool may have failed.

What to watch

• Whether mSeven explains what the suspicious activity was.
• Whether the company says customer data was accessed or stolen.
• Which accounts and two-factor methods customers must change.
• Whether mSeven answers The Register's questions.
• Any updates from the outside security experts the company hired.