CyberSandberg Search

Cyber

ALERT: mSecure emailed users a security notice

mSecure emailed users about "suspicious activity." Here's what we'd change first, in order.

Video: Alert: Got the mSecure Email? Do These 4 Steps (51 sec). It loads from YouTube only when you press play. Watch on YouTube

Checked

mSecure hasn't said what was accessed or if vault data was exposed. Our tip: change your master password first, then email, Apple or Google, and bank logins.

Who is affected

People who use the mSecure password manager now or used it in the past. The email says, "You are receiving this email because you are a current or former mSecure customer" (customer post of the email on mSecure's support forum). If you use a different password manager, you don't need to do anything for this alert.

What happened

On November 3, 2026, mSeven Software, the company that makes mSecure, emailed customers. It said it "recently learned of suspicious activity associated with the mSecure password management application," launched an investigation, "took steps to mitigate the issue," and brought in outside cybersecurity experts (The Register). The email recommends that customers "immediately take steps to protect all confidential information stored within the mSecure password management application," and says this "may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys" (The Register, heise online).

mSecure has not said what the suspicious activity was, when it happened, what was accessed, or whether stored passwords, vault data or encryption keys were exposed. The Register says mSeven had not answered its questions (The Register). mSecure advertises end-to-end, zero-knowledge encryption, and the email doesn't say whether that protection held (heise online). We'll update this alert when mSecure says more.

What to do now

  1. Change your mSecure master password first, inside the app (CyberSandberg tip).
  2. Then change your most important passwords: your email, your Apple or Google account, and your banking or brokerage accounts. Work through the rest of what you keep in mSecure after that (CyberSandberg tip).
  3. The email says protecting your information "may include ... resetting or re-enrolling two-factor authentication methods, or removing existing passkeys." It doesn't say whether that means only the 2FA codes and passkeys stored in mSecure (The Register). CyberSandberg tip: start with any 2FA codes and passkeys you keep in mSecure.
  4. Watch for fake follow-up emails pretending to be mSecure. Don't click links in them. Go to the app or type the website yourself (CyberSandberg tip).

Dates

Sources

  1. The Register, "Password manager mSecure tells users to change passwords, won't say why," Nov 3, 2026 (checked Nov 3, 2026)
  2. heise online, "mSecure password manager: Secure your credentials after an IT incident," Nov 3, 2026 (checked Nov 3, 2026)
  3. mSecure Support forum, "Important Security Notice Nov 3, 2026" (customer thread quoting the email) (checked Nov 3, 2026)