mSecure urges customers to reset passwords after suspicious activity detected

mSecure has told customers to change passwords, reset two-factor authentication and potentially remove passkeys after detecting suspicious activity linked to its password management app. The company has not said what happened or whether customer information was accessed, leaving users uncertain about the scale of the risk and which accounts may need attention.

Developer mSeven Software said it began an investigation, took steps to mitigate the issue and brought in external cybersecurity experts. Some customers say they have more than 500 or 800 passwords stored in the app and are asking whether they must change them all, or whether the warning concerns only credentials used to access mSecure. The company had not answered questions about the incident.