mSecure, the password manager owned by mSeven Software, has alerted current and former customers to enhance their security measures immediately following a security alert from the software's maker. The alert covers all aspects of mSecure, including two-factor authentication and passkeys, making it more comprehensive than a typical password reset. In a customer email, mSeven Software confirmed it had identified suspicious activity related to mSecure.
The company initiated an investigation, implemented measures to mitigate the risk, and engaged external cybersecurity experts.
The mSecure Security Alert The alert, posted on mSecure's support forum, advises users to update their passwords, re-enable two-factor authentication, and delete existing passkeys. The incident, which occurred following a December 2025 review by Germany's Federal Office for Information Security (BSI), underscores the need for further clarification and reassurance. The associated reports on VaultJacking and synchronized password vaults highlight why unauthorized access to one credential store can have broader implications.
Users must update affected account passwords via the service’s official websites or apps, focusing on sensitive accounts like financial services. Customers remain in need of mSeven to clarify which data was exposed, what safeguards failed, and whether remediation is complete.
