In case anyone here uses the mSecure Password Manager app, the mSeven company sent this notice today via email. Unfortunately there is a complete lack of details concerning this incident. Resetting hundreds of passwords is pretty extreme.

mSeven Software (“mSeven”) recently learned of suspicious activity associated with the mSecure password management application. In response, mSeven quickly launched an investigation, took steps to mitigate the issue, and engaged external cybersecurity experts to assist. You are receiving this email because you are a current or former mSecure customer.
Given the potential security implications, mSeven recommends that you immediately take steps to protect all confidential information stored within the mSecure password management application. This may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys.
We regret any inconvenience that this may cause.
Sincerely,
The mSeven Software Team

I've cautioned against using such applications and the response is always "They're very secure."

OK then

Sucks for users, only protection against this is to change them up occasionally, yeah it's a pain, yes some can be guessed, whatever they come up with to combat it will be broken at some point by a pimple faced fat kid in his underwear rocking 3 generators to keep his system up......

Yes, they're very secure, or so I'm told.

Gotta love their recent ad campaign:

"A password manager works best when you never have to think about it.
The small details that make it seamless."

I guess they overlooked some of those small details, like security of their data!

I have never used a password manager, just the good old notebook I keep hidden. Are there any that are recommendable?

Post-It notes stuck to the edge of your monitor can not be hacked.

For better security, don't stick them to the monitor; hide them under your keyboard.

quote:

Originally posted by fischtown7:
I have never used a password manager, just the good old notebook I keep hidden. Are there any that are recommendable?

I like this one – good quality, ruled, moderate price:
https://a.co/d/02Eq2IG4

I am MY Password Manager!

What? Wait: Everything I’ve ever seen posted about password managers is that this sort of thing is impossible(!!!). The next claim we’ll see is that huge organizations, including top level government agencies have been compromised. All fake news? Don’t tell me you didn’t get a visit from the Great Pumpkin or I’ll be devastated.

My notebook on my desk only got hacked once. My wife got into it.

quote:

Originally posted by V-Tail:
Post-It notes stuck to the edge of your monitor can not be hacked.

For better security, don't stick them to the monitor; hide them under your keyboard.

Well, there you go. Double secret!

quote:

Originally posted by Pipe Smoker:

quote:

Originally posted by fischtown7:
I have never used a password manager, just the good old notebook I keep hidden. Are there any that are recommendable?

I like this one – good quality, ruled, moderate price:
https://a.co/d/02Eq2IG4

HA HA HA

^^^^
Glad that you liked my little joke.

I got a nice password book from WalMart. I store it in my safe. If I ever forget my safe combo I'm screwed.

quote:

Originally posted by Fredward:

I got a nice password book from WalMart. I store it in my safe. If I ever forget my safe combo I'm screwed.

Write it down in your passwordl book so it will be there if you forget it.

Info from a Grok query today. I bolded one bullet.

“Follow-up Details (from support responses shared by customers)
Support replies clarified the following (also reported by BleepingComputer, TechRadar, and others):
• An unauthorized actor acquired an encrypted copy of a database containing information belonging to current and former mSecure users.
• mSeven states it has no evidence the attacker accessed the confidential (decrypted) information inside the database.
• The issue only affects users who were syncing with mSecure Cloud.
• The company has added security measures and says it has no evidence the app is currently unsafe to use. Deleting the app does not change the situation.
• They continue to recommend (as best practice) changing the master password, vital stored passwords, resetting/re-enrolling 2FA, and replacing passkeys and other sensitive information.”