{"id":239714,"date":"2026-11-13T12:22:19","date_gmt":"2026-11-13T20:22:19","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=239714"},"modified":"2026-11-13T12:22:19","modified_gmt":"2026-11-13T20:22:19","slug":"msecure-breach-what-to-do","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/","title":{"rendered":"mSecure Breach: How to Protect Your Data in mSecure Password Manager"},"content":{"rendered":"<p>mSeven Software, the maker of the mSecure password manager, emailed current and former customers on November 3, 2026, warning of &#8220;suspicious activity&#8221; and urging them to protect everything stored in the app, according to the notice <a href=\"https:\/\/support.msecure.com\/en\/support\/discussions\/topics\/36000038999\" target=\"_blank\" rel=\"noopener\">reproduced by customers on mSecure&#8217;s support forum<\/a>. In follow-up support replies that customers have posted, the company says an unauthorized party took an <strong>encrypted copy of a database<\/strong> with information about current and former users who synced with mSecure Cloud. If you use or used mSecure, change your master password and your most important stored passwords, reset 2FA, and replace your passkeys.<\/p>\n<h2><strong>What We Know About the mSecure Breach So Far<\/strong><\/h2>\n<p>mSecure warned customers by email that it had detected suspicious activity, but it has not published a public statement explaining what happened. Here&#8217;s what&#8217;s known, based on first-party messages and early reporting from <a href=\"https:\/\/www.theregister.com\/security\/2026\/11\/03\/password-manager-msecure-tells-users-to-change-passwords-wont-say-why\/5307296\" target=\"_blank\" rel=\"noopener\">The Register<\/a> and <a href=\"https:\/\/thehackernews.com\/2026\/11\/msecure-warns-users-to-change-passwords.html\" target=\"_blank\" rel=\"noopener\">The Hacker News<\/a> on November 3, 2026.<\/p>\n<p>On November 3, mSeven emailed current and former customers a security notice about &#8220;suspicious activity.&#8221; The company said it launched an investigation, took steps to mitigate the issue, and engaged outside cybersecurity experts. It suggested steps that &#8220;may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys,&#8221; but did not say what was accessed.<\/p>\n<p>Starting November 4, customers began posting the replies they got from mSecure support on the company&#8217;s forum. Those replies say an <a href=\"https:\/\/support.msecure.com\/en\/support\/discussions\/topics\/36000039016\" target=\"_blank\" rel=\"noopener\">encrypted copy of a user database was acquired<\/a>, that there is &#8220;no evidence&#8221; the confidential information in it was accessed, and that the issue only affects users who synced with mSecure Cloud. mSecure&#8217;s notice did not say how many people are affected, when the activity started, or whether it has stopped.<\/p>\n<h2><strong>Were mSecure Vaults Stolen?<\/strong><\/h2>\n<p>mSecure has not publicly confirmed that customer vaults were stolen. Its support replies say an attacker acquired an encrypted copy of a database of user information, and that the company has no evidence the confidential information inside was accessed.<\/p>\n<p>What is still unconfirmed:<\/p>\n<ul>\n<li>Whether the copied database contains full vault contents or account data only<\/li>\n<li>Whether any encryption keys were taken<\/li>\n<li>How many people are affected<\/li>\n<li>Whether users who synced only through Dropbox, iCloud, or Wi-Fi are at any risk<\/li>\n<\/ul>\n<p>Treat the support replies as the best information available, not a final account. We&#8217;ll update this article if mSeven publishes more.<\/p>\n<h2><strong>Why Change Passwords If mSecure Uses Zero-Knowledge Encryption?<\/strong><\/h2>\n<p>Encryption protects a stolen vault only as long as no one can guess the master password that unlocks it. mSecure says vault data is encrypted on your device before it syncs, so a copied database should be unreadable on its own. But anyone holding an encrypted copy can try to crack it offline, guessing master passwords as long as they like without hitting a login limit.<\/p>\n<p>That&#8217;s why a new master password alone isn&#8217;t enough:<\/p>\n<ul>\n<li><strong>A new master password doesn&#8217;t protect an old copy.<\/strong> If a copy was taken, it stays locked by the master password you had at the time.<\/li>\n<li><strong>Weak or reused master passwords are the main risk.<\/strong> A short password, or one used on another site that was breached, is far easier to crack than a long, unique passphrase.<\/li>\n<li><strong>2FA codes and passkeys can live in the same vault.<\/strong> On some plans, mSecure 7 can store 2FA codes and passkeys, according to The Hacker News. If a vault were ever decrypted, those would be exposed alongside your passwords. Resetting them removes that risk.<\/li>\n<\/ul>\n<p>In short, changing the passwords, 2FA, and passkeys stored in the vault makes any copied credentials useless, even if the copy is cracked later. Secure notes, card numbers, and ID numbers in an old copy can&#8217;t be changed the same way, so watch the accounts they belong to.<\/p>\n<h2><strong>Warning Signs of mSecure Breach Phishing<\/strong><\/h2>\n<p>Scammers often follow a public breach with fake security emails, so expect messages that use the mSecure incident as a lure. These are the signs to watch for.<\/p>\n<table width=\"624\">\n<tbody>\n<tr>\n<td width=\"312\"><strong>Red Flag<\/strong><\/td>\n<td width=\"312\"><strong>Why It Matters<\/strong><\/td>\n<\/tr>\n<tr>\n<td width=\"312\">An email asking you to &#8220;verify&#8221; or re-enter your master password<\/td>\n<td width=\"312\">A real breach notice won&#8217;t ask for your master password by email or link.<\/td>\n<\/tr>\n<tr>\n<td width=\"312\">A link to a &#8220;secure your vault&#8221; or &#8220;reset now&#8221; page<\/td>\n<td width=\"312\">Fake reset pages collect the new passwords you type. Open the app directly instead.<\/td>\n<\/tr>\n<tr>\n<td width=\"312\">An attachment such as a &#8220;security tool&#8221; or &#8220;incident report&#8221;<\/td>\n<td width=\"312\">Attachments in breach-themed emails are a common way to deliver malware.<\/td>\n<\/tr>\n<tr>\n<td width=\"312\">Password reset emails or 2FA prompts you didn&#8217;t request<\/td>\n<td width=\"312\">Someone may be trying your stored credentials on another account.<\/td>\n<\/tr>\n<tr>\n<td width=\"312\">A sign-in alert from a new device or location<\/td>\n<td width=\"312\">It can mean an account was accessed with an old password.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<h2><strong>What to Do Right Now: Steps for Current and Former mSecure Users<\/strong><\/h2>\n<p>Start with your master password, then work through your most important accounts in order. Former customers who synced with mSecure Cloud should follow the same steps for any password they haven&#8217;t changed since.<\/p>\n<ol>\n<li><strong>Decide where your new passwords will live.<\/strong> Choose your <a href=\"https:\/\/www.mcafee.com\/learn\/password-manager\/\" target=\"_blank\" rel=\"noopener\">password manager<\/a> before you start so you don&#8217;t save fresh credentials somewhere you don&#8217;t trust. If you stay with mSecure, change your master password first to a long, unique passphrase you&#8217;ve never used elsewhere.<\/li>\n<li><strong>Secure your email first.<\/strong> Your email account can reset almost everything else, so change its password and review its recovery phone number and backup email.<\/li>\n<li><strong>Change passwords for financial, work, and recovery accounts next.<\/strong> Do this through each service&#8217;s official website or app, using a unique password for each.<\/li>\n<li><strong>Reset two-factor authentication.<\/strong> Turn 2FA off and back on to re-enroll your authenticator app, and generate new backup codes. This makes any 2FA secrets stored in an old vault copy useless.<\/li>\n<li><strong>Replace your passkeys.<\/strong> Confirm you can still sign in another way, create a new passkey, then delete the old one in the account&#8217;s security settings. McAfee&#8217;s guide to <a href=\"https:\/\/www.mcafee.com\/learn\/what-is-a-passkey\/\" target=\"_blank\" rel=\"noopener\">how passkeys work<\/a> explains why the old one should go.<\/li>\n<li><strong>Work through the rest of your vault.<\/strong> Change remaining passwords by importance. Accounts you no longer use are a good time to close.<\/li>\n<li><strong>Check for reused passwords.<\/strong> If a password stored in mSecure is also used anywhere else, change it on every site. Our guide to <a href=\"https:\/\/www.mcafee.com\/learn\/how-to-check-for-password-leaks\/\" target=\"_blank\" rel=\"noopener\">checking for password leaks<\/a> shows how to see if any were already exposed.<\/li>\n<\/ol>\n<h2><strong>What to Do If You Think an Account Was Already Accessed<\/strong><\/h2>\n<p>If you see logins, password changes, or transactions you don&#8217;t recognize, act on that account before finishing the list above.<\/p>\n<ul>\n<li><strong>Regain control of the account.<\/strong> Reset the password, sign out all other sessions, and remove devices or recovery details you don&#8217;t recognize.<\/li>\n<li><strong>Call your bank or card issuer<\/strong> using the number on the back of your card if money moved or a financial account changed.<\/li>\n<li><strong>Freeze your credit<\/strong> with Equifax, Experian, and TransUnion if personal or financial details were stored in your vault.<\/li>\n<li><strong>Go to <a href=\"https:\/\/www.identitytheft.gov\/\" target=\"_blank\" rel=\"noopener\">IdentityTheft.gov <\/a><\/strong>if someone used your identity to open accounts or make purchases. It creates a recovery plan for you.<\/li>\n<li><strong>Keep records<\/strong> of alerts, emails, transaction details, and the dates you changed each credential.<\/li>\n<\/ul>\n<h2><strong>Can Password Managers Be Hacked?<\/strong><\/h2>\n<p>Yes. Password manager companies can be breached like any other, which is why encryption and a strong master password matter so much. The best-known case is LastPass, which <a href=\"https:\/\/blog.lastpass.com\/2022\/12\/notice-of-recent-security-incident\/\">disclosed in December 2022<\/a> that an attacker copied a backup of customer vault data. LastPass said sensitive fields stayed encrypted, but it advised customers with weaker master passwords to change their stored website passwords as a precaution.<\/p>\n<p>A breached password manager is still not a reason to go back to reusing passwords. Reused passwords put every account at risk when any single website is breached. A password manager with a long, unique master password and 2FA turned on remains one of the most effective ways to keep accounts separate.<\/p>\n<h2><strong>How to Report It<\/strong><\/h2>\n<p>Report problems to the channels that match what happened:<\/p>\n<ul>\n<li><strong>mSeven Software:<\/strong> submit a ticket at <a href=\"https:\/\/support.msecure.com\/\" target=\"_blank\" rel=\"noopener\">support.msecure.com<\/a> with questions about your account.<\/li>\n<li><strong>FBI Internet Crime Complaint Center:<\/strong> report account takeovers or financial losses at <a href=\"https:\/\/www.ic3.gov\/\" target=\"_blank\" rel=\"noopener\">ic3.gov<\/a>.<\/li>\n<li><strong>Federal Trade Commission:<\/strong> report phishing emails or fraud at <a href=\"https:\/\/reportfraud.ftc.gov\/\" target=\"_blank\" rel=\"noopener\">ReportFraud.ftc.gov<\/a>.<\/li>\n<li><strong>gov:<\/strong> report and recover from identity theft.<\/li>\n<li><strong>Your local police<\/strong>, if you lost money.<\/li>\n<\/ul>\n<p>Whatever mSecure discloses next, the priority is the same: change your master password, then your email, financial, and work passwords, and reset the 2FA and passkeys tied to them. Once those credentials change, copied credentials no longer open your accounts. Notes, card numbers, and ID numbers in an old copy can&#8217;t be changed, so keep watching the accounts they belong to.<\/p>\n<h2><strong>FAQ<\/strong><\/h2>\n<h3><strong>Was mSecure Hacked?<\/strong><\/h3>\n<p>mSeven Software warned customers of &#8220;suspicious activity&#8221; on November 3, 2026. Support replies posted by customers say an attacker took an encrypted copy of a user database, though the company hasn&#8217;t published a public statement confirming that.<\/p>\n<h3><strong>Is mSecure Safe to Use?<\/strong><\/h3>\n<p>In support replies customers posted, according to <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/msecure-password-manager-hack-prompts-password-reset-warnings\/\" target=\"_blank\" rel=\"noopener\">BleepingComputer<\/a>, mSeven reportedly said it added security measures and has no evidence the app is currently unsafe to use. It has not said this publicly. Whether to keep using it is your call. Either way, change your master password and key credentials now.<\/p>\n<h3><strong>I&#8217;m a Former mSecure Customer. Am I Affected?<\/strong><\/h3>\n<p>Possibly. The support replies say the copied database includes information about former users who synced with mSecure Cloud. Change any password you stored in mSecure that you still use, and reset 2FA and passkeys on those accounts.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>mSeven Software, the maker of the mSecure password manager, emailed current and former customers on November 3, 2026, warning of&#8230;<\/p>\n","protected":false},"author":1440,"featured_media":237242,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[13],"tags":[],"coauthors":[16632],"class_list":["post-239714","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy-identity-protection"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>mSecure Breach: How to Protect Your Password Manager Data | McAfee Blog<\/title>\n<meta name=\"description\" content=\"mSecure&#039;s maker told users an encrypted cloud database was copied. Here&#039;s what&#039;s confirmed and how to reset your passwords, 2FA, and passkeys.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"mSecure Breach: How to Protect Your Password Manager Data | McAfee Blog\" \/>\n<meta property=\"og:description\" content=\"mSecure&#039;s maker told users an encrypted cloud database was copied. Here&#039;s what&#039;s confirmed and how to reset your passwords, 2FA, and passkeys.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/\" \/>\n<meta property=\"og:site_name\" content=\"McAfee Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-13T20:22:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Brooke Seipel\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@McAfee\" \/>\n<meta name=\"twitter:site\" content=\"@McAfee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brooke Seipel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/\"},\"author\":{\"name\":\"Brooke Seipel\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/e0177129df164a74082f47397af3e729\"},\"headline\":\"mSecure Breach: How to Protect Your Data in mSecure Password Manager\",\"datePublished\":\"2026-11-13T20:22:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/\"},\"wordCount\":1578,\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg\",\"articleSection\":[\"Privacy &amp; Identity Protection\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/\",\"name\":\"mSecure Breach: How to Protect Your Password Manager Data | McAfee Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg\",\"datePublished\":\"2026-11-13T20:22:19+00:00\",\"description\":\"mSecure's maker told users an encrypted cloud database was copied. Here's what's confirmed and how to reset your passwords, 2FA, and passkeys.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#primaryimage\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg\",\"width\":600,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy &amp; Identity Protection\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"mSecure Breach: How to Protect Your Data in mSecure Password Manager\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"name\":\"McAfee Blog\",\"description\":\"Internet Security News\",\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\",\"name\":\"McAfee\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"width\":1286,\"height\":336,\"caption\":\"McAfee\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/x.com\/McAfee\",\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/www.youtube.com\/McAfee\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/e0177129df164a74082f47397af3e729\",\"name\":\"Brooke Seipel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/ac03c1083bbdcd2cbb0675dc29c62cbe\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2025\/01\/1693283531327-96x96.jpg\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2025\/01\/1693283531327-96x96.jpg\",\"caption\":\"Brooke Seipel\"},\"description\":\"Brooke Seipel is the Content Editor in Chief at McAfee, where she leads the company's content strategy with a focus on cybersecurity education. With a decade of experience in audience development and digital content, Brooke has a strong understanding of online audiences, emerging trends, and the evolving cyber landscape. Before joining McAfee, Brooke led audience teams and served as both a reporter and editor at numerous award-winning publications including Fortune, The Hill, International Business Times, New Republic, and The OC Register. Brooke is dedicated to providing insightful, actionable content that empowers readers to make informed decisions about their digital safety. When she's not immersed in the world of cybersecurity, you can find her scrolling social media endlessly, soaking up the latest trends, and also volunteering as a naturalist.\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/author\/brooke-seipel\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"mSecure Breach: How to Protect Your Password Manager Data | McAfee Blog","description":"mSecure's maker told users an encrypted cloud database was copied. Here's what's confirmed and how to reset your passwords, 2FA, and passkeys.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"mSecure Breach: How to Protect Your Password Manager Data | McAfee Blog","og_description":"mSecure's maker told users an encrypted cloud database was copied. Here's what's confirmed and how to reset your passwords, 2FA, and passkeys.","og_url":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/","og_site_name":"McAfee Blog","article_publisher":"https:\/\/www.facebook.com\/McAfee\/","article_published_time":"2026-11-13T20:22:19+00:00","og_image":[{"width":600,"height":400,"url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg","type":"image\/jpeg"}],"author":"Brooke Seipel","twitter_card":"summary_large_image","twitter_creator":"@McAfee","twitter_site":"@McAfee","twitter_misc":{"Written by":"Brooke Seipel","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#article","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/"},"author":{"name":"Brooke Seipel","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/e0177129df164a74082f47397af3e729"},"headline":"mSecure Breach: How to Protect Your Data in mSecure Password Manager","datePublished":"2026-11-13T20:22:19+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/"},"wordCount":1578,"publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg","articleSection":["Privacy &amp; Identity Protection"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/","url":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/","name":"mSecure Breach: How to Protect Your Password Manager Data | McAfee Blog","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#primaryimage"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg","datePublished":"2026-11-13T20:22:19+00:00","description":"mSecure's maker told users an encrypted cloud database was copied. Here's what's confirmed and how to reset your passwords, 2FA, and passkeys.","breadcrumb":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#primaryimage","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2026\/09\/40.jpg","width":600,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/msecure-breach-what-to-do\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.mcafee.com\/blogs\/"},{"@type":"ListItem","position":2,"name":"Privacy &amp; Identity Protection","item":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/"},{"@type":"ListItem","position":3,"name":"mSecure Breach: How to Protect Your Data in mSecure Password Manager"}]},{"@type":"WebSite","@id":"https:\/\/www.mcafee.com\/blogs\/#website","url":"https:\/\/www.mcafee.com\/blogs\/","name":"McAfee Blog","description":"Internet Security News","publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.mcafee.com\/blogs\/#organization","name":"McAfee","url":"https:\/\/www.mcafee.com\/blogs\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","width":1286,"height":336,"caption":"McAfee"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/McAfee\/","https:\/\/x.com\/McAfee","https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/www.youtube.com\/McAfee"]},{"@type":"Person","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/e0177129df164a74082f47397af3e729","name":"Brooke Seipel","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/ac03c1083bbdcd2cbb0675dc29c62cbe","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2025\/01\/1693283531327-96x96.jpg","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2025\/01\/1693283531327-96x96.jpg","caption":"Brooke Seipel"},"description":"Brooke Seipel is the Content Editor in Chief at McAfee, where she leads the company's content strategy with a focus on cybersecurity education. With a decade of experience in audience development and digital content, Brooke has a strong understanding of online audiences, emerging trends, and the evolving cyber landscape. Before joining McAfee, Brooke led audience teams and served as both a reporter and editor at numerous award-winning publications including Fortune, The Hill, International Business Times, New Republic, and The OC Register. Brooke is dedicated to providing insightful, actionable content that empowers readers to make informed decisions about their digital safety. When she's not immersed in the world of cybersecurity, you can find her scrolling social media endlessly, soaking up the latest trends, and also volunteering as a naturalist.","url":"https:\/\/www.mcafee.com\/blogs\/author\/brooke-seipel\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/239714","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/users\/1440"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/comments?post=239714"}],"version-history":[{"count":2,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/239714\/revisions"}],"predecessor-version":[{"id":239716,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/239714\/revisions\/239716"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media\/237242"}],"wp:attachment":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media?parent=239714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/categories?post=239714"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/tags?post=239714"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/coauthors?post=239714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}