mSeven Software mSecure · Breach

mSecure Urges Password Changes, 2FA Reset and Passkey Removal

Nov 03, 2026 · 1 min read

mSeven Software, maker of the mSecure password manager, emailed customers on November 3 about suspicious activity linked to the app. The company asks users to change stored passwords, reset two-factor authentication, and remove passkeys while it investigates. The source gives no details on the nature of the activity.

By HIFY Radar newsroom Updated 11/03/2026 03:54 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

mSeven Software, maker of the mSecure password manager, emailed customers on November 3 about suspicious activity linked to the app. The company asked all users to change stored passwords, reset two-factor authentication, and remove passkeys. Its investigation is ongoing.

Why it matters

mSecure stores passwords and credentials for corporate and personal accounts. If the suspicious activity compromised that data, attackers could reach corporate email, financial systems, and critical services. Preventive action by each user reduces that risk.

What to do

Tell all employees using mSecure to change stored passwords, reset 2FA, and remove passkeys today. Prioritize critical accounts such as corporate email and financial access. Watch for abnormal logins on accounts tied to the vault.

For the technical team

Affected: mSeven Software mSecure (gerenciador de senhas) · mSecure app (password manager); versions not specified in the source.
Exploitation: No confirmed exploitation in the source. mSeven Software reports 'suspicious activity' and is investigating; no details on a breach or access have been disclosed.
Fix: No fix cited. Company-recommended mitigation: change stored passwords, reset two-factor authentication, and remove passkeys.
Vector: Not described in the source. mSeven Software only cites 'suspicious activity' linked to the mSecure app, with no details on the vector or affected component.
More details: The warning was emailed on November 3 in the name of mSeven Software, per The Hacker News. The nature of the suspicious activity was not detailed in the source.