mSecure Warns After Encrypted Cloud Database Taken: What to Do

On Tuesday, Nov. 3, 2026, current and former mSecure customers opened an email titled as an important security notice. The message from mSeven Software told them the company had learned of suspicious activity tied to the mSecure password manager, had started an investigation, and wanted people to protect confidential information stored in the app. It suggested changing passwords, resetting or re-enrolling two-factor authentication, and removing passkeys. It left out what was taken.

That vagueness set off a rush of posts on mSecure's own support forum. People with hundreds of saved logins wanted to know whether the vault itself was gone or only something smaller. Later support replies, which customers pasted into the forum and which BleepingComputer covered on Nov. 4, filled in the missing piece. An unauthorized actor acquired an encrypted copy of a database containing information belonging to current and former mSecure users. mSeven reports no evidence the actor accessed the confidential information stored inside that encrypted mSecure Cloud database.

Read that twice. The copy that left was encrypted. The company is not claiming decrypted passwords walked out the door, and it is also not claiming that nothing happened.

Who this hits

The fuller support reply draws a hard line on scope. The issue only pertains to people who were syncing with mSecure Cloud. If you kept mSecure on a phone or computer and synced only through Dropbox, iCloud, or Wi-Fi sync between your own devices, that reply puts you outside the incident as described. Deleting the app does not undo a copy that already left the cloud. The company also reports no evidence mSecure is not currently safe to use, and that it has taken steps to bolster security after the discovery.

mSecure's security docs describe AES-256 encryption and a zero-knowledge design that encrypts data on your device before anything is sent for sync. In that model the company is not supposed to be able to read your vault contents in the clear. An encrypted database sitting in someone else's hands is still a real problem if a master password is weak enough to crack offline. That is not a claim that anyone has cracked these vaults. It is the same class of risk that showed up after the 2022 LastPass incident, when stolen encrypted vault backups later sat in the middle of research into cryptocurrency thefts tied to weak master passwords. Treat it as context for why a master-password reset still matters here, not as proof about mSecure's case.

mSeven has not published a public incident page with a user count, a dollar figure, or a technical write-up of how the copy was taken. BleepingComputer asked the company for more detail on the incident, the stolen database, and the impact on customers, and had not received a reply when its Nov. 4 story went up. Stick to what the email and the support text actually state.

What to do now

If you did not use mSecure Cloud sync, the company's support reply says this issue does not pertain to you. mSeven still recommends that all mSecure customers change their master password and vital stored passwords as a standard practice. If you did use mSecure Cloud, or you are not sure, work the list below in order. Do the work inside the real app or a website address you type yourself. Do not follow a fresh email that asks you to "verify" the breach.

1. Change your mSecure master password in the app if you still use mSecure. Pick a long, unique passphrase you have not used anywhere else. This is the key that protects the vault on your devices and any future cloud sync.

2. Change the passwords that open everything else, starting with email, then your Apple ID, Google account, or Microsoft account, then banking and payment logins. Those accounts can reset every other password. If an attacker ever got a usable vault, that is where the damage starts.

3. Reset two-factor authentication anywhere mSecure stored authenticator secrets or backup codes. If mSecure was generating your six-digit login codes, turn 2FA off and back on for those sites, and move the secret into a separate authenticator you control.

4. Remove passkeys stored in mSecure and create them again on a device or manager you trust. Removing passkeys is one of the steps the original email recommended.

5. Work through the rest of the vault after the high-value accounts are done. Old shopping sites and hobby logins can wait an afternoon. Government IDs, recovery emails, and crypto-related entries cannot.

6. Watch for fake "mSecure breach" phishing. Scammers ride real headlines. A message that pushes a "secure reset" link, a phone number, or a download is a separate attack. Open the app from your home screen, or type msecure.com yourself. Do not use a link from an unexpected email.

If you decide to leave mSecure for another manager, export what you still need before you cancel, then move the high-value logins first. Our beginner overview is here: which password manager a beginner should use. Changing managers does not replace steps 1 through 6. The encrypted copy that left the cloud stays out there either way.

One more practical note from the support reply: deleting mSecure will have no impact on this situation. Uninstalling cleans your phone. It does not recall a database copy that already left.

The original Nov. 3 email went to current and former customers, which is why people who canceled years ago still saw it. Former Cloud sync users should treat the same reset list as current ones. If your only sync path was not mSecure Cloud, the company's later reply puts you outside the incident as described, and you can weigh that against how sure you are about your old settings.

Nobody outside mSeven can tell you today whether any specific vault will ever be cracked. What the public record shows is narrower: an encrypted database copy of Cloud users was acquired, the company reports no evidence of decrypted access so far, and the recommended response is a staged password and 2FA cleanup starting with the accounts that matter most.

Want the next fix in plain English? Follow Tech Cheat Codes on Facebook. Tap this link, then tap Follow: Follow Tech Cheat Codes on Facebook

References

• Source: Important Security Notice Nov 3, 2026 — mSecure Support
• Source: Update from mSecure Team — mSecure Support
• Source: mSecure password manager hack prompts password reset warnings — BleepingComputer (Lawrence Abrams, Nov 4, 2026)