mSecure password manager reports IT security incident
mSeven Software has notified users of suspicious activity involving the mSecure password manager. The company urges all users to update their credentials immediately.
The developer behind the mSecure password manager, mSeven Software, has disclosed a security incident involving suspicious activity within its infrastructure. The company has engaged external IT security experts to assist in an ongoing investigation into the breach.
Following the discovery, mSeven is advising current and former users to immediately rotate passwords, reset two-factor authentication settings, and remove existing passkeys. The company has yet to provide specific details regarding how the unauthorized access occurred or what data, if any, was compromised.
This incident has drawn attention to previous concerns regarding mSecure’s security architecture. In a 2024 review, Germany's Federal Office for Information Security (BSI) identified that the application could theoretically allow manufacturer access to stored data, questioning the validity of its 'zero-knowledge' claims. With hundreds of thousands of users across iOS and Android, the potential scale of the impact remains a significant concern for the industry.