← Voltar ao feed
high

Password Manager mSecure Urges Password, 2FA and Passkey Resets After Undisclosed Security Incident

1 fonte(s) · 1 atualização(ões) · publicado 03/11/2026 13:10 · coletado há 1 hora

mSeven Software, maker of the mSecure password manager, emailed customers on November 3, 2026 warning of "suspicious activity" tied to the application and urging them to change passwords, reset or re-enroll two-factor authentication, and potentially remove passkeys. The company says it launched an investigation, took mitigation steps, and engaged external cybersecurity experts, but has not disclosed what occurred, when it happened, or whether customer data or vaults were actually accessed. Customers on mSecure's support forum and Reddit have criticized the vague guidance, noting that some users store hundreds of passwords and have no way to determine which credentials, 2FA methods, or passkeys actually need replacing. mSeven has not responded to press inquiries, leaving the scope and nature of the incident unconfirmed.

Remediação

Affected mSecure users are advised by the vendor to change stored passwords, reset or re-enroll two-factor authentication methods, and consider removing existing passkeys as a precaution, though no specific guidance on scope or affected accounts has been provided.

Linha do tempo

  1. theregister.com ↗ · pub. 03/11/2026 13:10 · coletado 03/11 14:00 primeiro registro

    Password Manager mSecure Urges Password, 2FA and Passkey Resets After Undisclosed Security Incident

    ler a análise desta fonte

    mSeven Software, maker of the mSecure password manager, emailed customers on November 3, 2026 warning of "suspicious activity" tied to the application and urging them to change passwords, reset or re-enroll two-factor authentication, and potentially remove passkeys. The company says it launched an investigation, took mitigation steps, and engaged external cybersecurity experts, but has not disclosed what occurred, when it happened, or whether customer data or vaults were actually accessed. Customers on mSecure's support forum and Reddit have criticized the vague guidance, noting that some users store hundreds of passwords and have no way to determine which credentials, 2FA methods, or passkeys actually need replacing. mSeven has not responded to press inquiries, leaving the scope and nature of the incident unconfirmed.

    Remediation

    Affected mSecure users are advised by the vendor to change stored passwords, reset or re-enroll two-factor authentication methods, and consider removing existing passkeys as a precaution, though no specific guidance on scope or affected accounts has been provided.