Password manager mSecure tells users to change passwords, won't say why

Password manager mSecure has warned customers to change their passwords, reset two-factor authentication, and potentially remove their passkeys after detecting suspicious activity, but it has not explained what happened or whether anyone's secrets were exposed.

In an email sent to customers on November 3, seen by The Register, US-based developer mSeven Software said it launched an investigation after discovering something amiss with its password management application.

"mSeven Software ('mSeven') recently learned of suspicious activity associated with the mSecure password management application," the company wrote. "In response, mSeven quickly launched an investigation, took steps to mitigate the issue, and engaged external cybersecurity experts to assist."

The company has yet to answer what the suspicious activity involved, when it occurred, or whether attackers accessed customer information.

Its advice to customers, however, suggests that they should take this seriously.

"Given the potential security implications, mSeven recommends that you immediately take steps to protect all confidential information stored within the mSecure password management application," …