Mac OS 10.11.6 with Mac iOS 9.3.5
I've just downloaded and installed mSecure 5.5.2
All running OK on my iMac and now installing on my iPhone and iPad.
I've chosen to sync between devices by wifi.
My concern is that although I've been emailed a QR code to authorise installation on the iPhone and iPad, mSecure didn't require the QR code - it just automatically synced between devices as I installed ...
A security issue?
I just responded to your request via email, so you should receive it shortly. We'll continue the support via email.
Thank you for contacting us and I'm sorry about the issue you're experiencing. Our system shows that you haven't signed into your mSecure account in mSecure 5 on a device yet. The way our security system works, you should have received the authentication email after you first signed in to your mSecure account the very first time in mSecure 5. You can read about our security model here: https://support.msecure.com/knowledge-base/msecures-cloud-security-model
You can download mSecure 5 here:
Paid users simply have to sign in to the mSecure account they created and used to purchase an mSecure 5 license. I would recommend starting with mSecure 5 on a device that has the previous versions installed so that mSecure 5 can walk you through the migration process: https://support.msecure.com/knowledge-base/migrating. Otherwise, you can always restore from a .msim backup file created in the previous versions: https://support.msecure.com/knowledge-base/msecure-backups
Thank you for contacting us. There is no security issue here, but I'm sorry that we did not document what is happening here a bit better. I have now gone ahead and updated our account authentication and resend authentication email articles to provide the information needed.
mSecure 5.5 and above for iOS and Mac will automatically save your encrypted account key in your iCloud Drive after you've authenticated into your account at least once in msecure 5 on iOS or Mac. If mSecure 5.5 finds the encrypted account key in your iCloud Drive and authenticates your account without error, it will automatically authenticate your account without you needing to authenticate manually.
We added this ability to help customers through the authentication process. Many customers do not pay attention to our warnings about needing to save their QR code or authentication email and end up deleting the authentication email and(or) QR code an access to their mSecure account and information.