mSeven Software, the developer of the mSecure password manager, has warned current and former customers about suspicious activity linked to the app. An email sent on November 3 recommends steps including changing passwords, resetting two-factor authentication (2FA) and removing Passkeys, but does not explain what happened or whether stored information was accessed.
A customer posted the email’s text in an mSecure support forum thread that day. The message says mSeven began investigating, took steps to limit the issue and engaged outside cybersecurity experts. It does not identify the systems involved, say when the activity occurred or whether it has stopped, or disclose how many people received the warning.
The email also leaves unclear which accounts customers should prioritize and how to complete the suggested steps. It does not specify whether the 2FA and passkey advice applies to credentials stored in a vault, sign-in to an mSecure account, or both. Nor does it say whether customers should continue using mSecure, including for newly changed passwords.
Customers can sync an mSecure vault through mSecure Cloud, Dropbox, iCloud or Wi-Fi, but the email does not indicate whether the choice of sync method is relevant. mSecure 7 can also store passkeys and 2FA codes alongside passwords on the Essentials plan and higher.
mSecure says vault data is encrypted on a customer’s device before syncing and that its developers cannot access customer information. The warning does not say whether the suspicious activity reached vault data or the keys used to protect it.
As of 18:00 UTC on November 3, mSeven had not posted about the email on mSecure’s X or Facebook accounts, and no staff member had replied in the forum thread. The latest iPhone version listed in Apple’s App Store at that time was mSecure 7.1.0, released on October 23.
Sources: The Hacker News.