Chat support available. Click the chat icon on the bottom right corner to start chatting with us right away!

mSecure Support

Knowledge Base Forums Submit a ticket
Discussions > General > Feature Requests
Start a new topic

mSeven/mSecure Security Notice

I received the email indicating suspicious activity associated with the mSecure password management application. What steps do all mSecure users need to take to protect their information. Dow e need to change every password that was entrusted to mSecure? That is an extremely burdensome task.
11 people like this idea

Ok, I think we should all focus on those basic question:


- WHAT was compromised?

- WHICH data was stolen?

- Does it affect msecure cloud users ONLY or all users of msecure


B-question: if the hack refers to ALL users, how is it possible that a locally stored encrypted(???) database was accessible from the outside world.


and the final question: where can we claim our rapidly going up costs for changing passes, blocking bank accounts etc etc etc?

Since receiving the email in question, my mSecure app no longer works on my MAC. It does, however, work fine on my iPhone.

Quite frankly, no public response is very damaging as it erodes any trust that remains from hopeful users that it is just an email issue. We are now resorting to speculation on exactly what is compromised and whether mSecure have lied and misled users about zero knowledge security. 


An appropriate response would be to enable mfa on all accounts, issue an official statement and try to reassure users. I feel that for many users that time may have passed.

Yes enable Two-Factor Authentication on all accounts for free.

Yes this is most alarming I sent them an email and they have raised a support ticket, no details at all. We all need to understand what has occurred and exactly what steps we need to take.

Where is the update?  Come on guys!  This is abysmal and I am hours away from abandoning mSecure for 1Password.  You should be reassuring us with proof that you have not stored any of the keys in your servers.  If all of our password files are encrypted with AE 256, and to hack that the bad guys would need our account user name and password along with our locally stored keys then why the hell are you telling people that we need to change passwords ASAP?   Tells me you know more than you are letting on and need to open up to complete transparency here for what happened and what is going on.   Your management of this situation is piss poor.

I am a longtime user of MSecure and shocked about the way the company not responding to any questions raised!! Second, its not even possible knowing there has been a security alert that you can only activate 2 factor authentication when you take a premium membership, highly thinking of just leaving this app and move on, just renewed my subscription, stupid of me...

I got the same lowkey email this morning (Nov 3) about the DATA BREACH. There was no detail about the extent of the breach, if my account had truly been impacted, no offer of assistance, no number to call to get support/advise, just the suggestion to redo every password & entry held within the App. What the Heck are they thinking? Security IS their business. They sell subscribers with this claim. It will be a tremendous task to change each password/entry—perhaps it’s already too late?? WHAT RECOURSE DO PAYING SUBSCRIBERS HAVE??

I only use my iPhone with backups to iCloud, so what was compromised here?  Someone hacked my phone and iCloud?  The encrypted backup?  I understand the early alert, but this info is extremely lacking as to what configurations and what specific data was compromised or not.  

I can’t see how MSecure feel zero communication can be acceptable. I do not see a way the company and product survives this - and the email this morning was clearly to meet a legal requirement versus offering any support. I’m busy working through the massive job of trying to secure and change logins as, in the total absence of feedback, what choice do we have? I think we have to assume that (a) data has been compromised and (b) the MSecure product has no future at this point unless someone can come forward to explain what was/was not leaked. Given the marketing statements on how our data was supposed to have been secured and vault passwords not accessible at MSeven’s end I can only assume this was misleading. Again, not sure what else to do but move away from the App. Every hour counts if our data has leaked ….

Just to add, I feel for the employees who are not to blame for this. I don't wish anyone's business to fail, but someone needs to step up and talk to the customers at this point. 

Allright. Ten+ hrs after the flag was raised. And no single reply or a single bit of info from msecure. Time to start migrating everything by hand. Lost revenue can hopefully be filed to the creators of this chaos. 2026, a security breach that is known NOTHING about. Incredible. And yes, we are very angry. Subscription ended, worth nothing at all.

Very worrying discovery. After changing the msecure password in complete OFFLINE mode (no network connection), an error appears: There was an error sending the password to the cloud. Please make sure you have an internet connection and try again.


in other words: master passwords ARE definitely stored at msecure’s offices. And who knows what more????

Login or Signup to post a comment