Users urged to reset two-factor authentication as password manager mSecure tells customers to change passwords

Company reports suspicious activity

mSecure operator mSeven Software said it recently learned of suspicious activity connected with the password management application. The company said it began an investigation, acted to mitigate the issue and engaged external cybersecurity experts.

mSeven has not described the activity or said when it took place. It also has not confirmed whether attackers accessed customer information or stored secrets.

Customers seek clearer guidance

The company’s recommendations include changing passwords, resetting two-factor authentication and potentially removing passkeys. Customers have questioned how extensive those steps should be without knowing what was affected. One customer asked mSeven to explain what data was compromised and what action was required. Another said they had more than 800 passwords stored and asked whether every one needed to be changed.

Uncertainty adds to the burden

For people with hundreds of stored credentials, replacing them could take hours. The lack of information leaves customers unable to identify which accounts may require attention. Customers have also discussed the notification on Reddit. The company closed its email by regretting any inconvenience, a phrase that may understate the effort involved for users facing many password changes.