Top password manager mSecure tells users to change passwords immediately

Date:
Wed, 04 Nov 2026 14:20:00 +0000

Description:
Users synced with its cloud service might be at risk, as a copy of an encrypted database is nabbed.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter mSecure disclosed a breach involving an encrypted cloud database containing data from current and former users Company urged users to rotate critical passwords, MFA methods, and passkeys despite no evidence vaults were decrypted Customer criticism grew after limited initial disclosure left uncertainty about the incidents scope and impact Top password manager mSecure has confirmed it suffered a data breach and, out of an abundance of caution, and told its customers to simply reset everything, leaving some pretty upset.

On November 3 2026, the company behind mSecure, called mSeven Software, sent an email to its customers, saying it recently learned of suspicious activity associated with the mSecure password management application. It soon launched an investigation, mitigated the issue, and brought in third-party cybersecurity experts to assist. The notice, while rather sparse on details, urged customers to immediately take steps to protect all confidential information stored within the mSecure password management application. This may include changing passwords, resetting or re-enrolling two factor authentication methods, or removing existing passkeys." Latest Videos From TechRadar Watch full video here: Encrypted database All this was said without detailing what happened, and customers did not take it well. On Reddit, users were asking if this pertained just to the master password, or to all
passwords stored inside the manager. Some people have hundreds of secrets locked away in mSecure, and changing all of them would take hours.

This notice is wildly insufficient, one user wrote. Recommending potentially hundreds of credential changes without identifying the underlying threat, the affected customers, or the security of the application being used to make those changes is inadequate. You may like Best Password Manager of 2026: Expert Recommendations for Your Credential Security Millions of stolen
records allegedly dumped online by mystery "Hatman" hacker McDonalds, Vodafone and more see Microsoft Azure records stolen Save up to 50% off
Keeper plans in September

mSecure allegedly responded with a follow-up notice that was also shared on social media. In it, it disclosed more details, and somewhat played down the actual breach:

Yesterday, mSeven learned that an unauthorized actor acquired an encrypted copy of a database containing information belonging to current and former users of the mSecure password management application, it said. Importantly, mSeven has no evidence that the unauthorized actor has accessed the confidential information stored within the database in the mSecure Cloud. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro
newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Putting it plainly, a threat actor walked away with a copy of the database that was sitting in mSecure Cloud, and all users - current and former - who had synced their password manager with the cloud service are at risk.

But mSeven tried to downplay the severity of the incident. Throughout the announcement, it repeated multiple times that the stolen database was encrypted and that there is no evidence that the threat actors managed to decrypt it. Truth be told, encrypted databases should be safe, but many criminals are still hoarding them, in case anyone makes a breakthrough at any point in time. Theres actually a name to the practice - HNDL (harvest now, decrypt later).

It also responded to user criticism about having to change all passwords now: What to read next Massive GovTech breach leaks 42 million documents
including thousands packed with personal information Massive data leak from
AI development company exposes almost 14 million records Vibetech collected data from different breaches and accidentally made them accessible online
This fake LastPass Authenticator app will just shut off your antivirus and leave you open to attack

As a standard best practice, mSeven continues to recommend that mSecure customers change their master password, change vital stored passwords, reset two-factor authentication methods, replace passkeys and any other sensitive information. This should be a part of all routine security practices. Not the only password manager in trouble Finally, mSecure said deleting the app wont help the situation and stressed that the issue only pertains to users that were syncing with the mSecure Cloud.

mSeven takes the security and privacy of all information stored on the
mSecure platform very seriously and has no evidence that mSecure is not currently safe for use, it said. Our support team is working as fast as possible to respond to customer questions. We take your trust in us
seriously, and appreciate your patience and continued support.

How this reflects the companys image remains to be seen. One Reddit user said the company was deleting negative reviews and complaints that were being left on the Google Play Store. But mSecure is hardly the only password manager experiencing an incident such as this one. In June this year LastPass confirmed losing sensitive customer data , while Dashlane said hackers obtained at least a dozen encrypted vaults.

Via The Register The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/top-password-manager-msecure-tells-user s-to-change-passwords-immediately


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)