mSecure advises users to change passwords after database breach

Password manager mSecure says an unauthorized party obtained an encrypted copy of a database containing information about current and former users. The company says it has no evidence the party accessed confidential information stored in mSecure Cloud or decrypted the database.

On November 3, 2026, mSeven Software, the company behind mSecure, told customers it had found suspicious activity connected to the app. It said it investigated, mitigated the issue and brought in outside cybersecurity experts. The initial notice urged users to protect information stored in the app, including by changing passwords, resetting or enrolling two-factor authentication methods again, or removing passkeys.

A follow-up notice said the database copy belonged to current and former users. mSeven said the incident affects users who synced mSecure with mSecure Cloud. It also said deleting the app would not help. The company recommends that customers change their master password and important stored passwords, reset two-factor authentication methods, replace passkeys and update other sensitive information as part of routine security practices.

Some users criticized the notices on Reddit, saying they lacked details about the threat and affected customers. One user said recommending potentially hundreds of credential changes without explaining the threat or the security of the app was inadequate. TechRadar also reported an allegation by a Reddit user that mSecure was deleting negative Google Play Store reviews; the source does not independently verify that claim.