Confirm iPhone Passcode to continue using iCloud Message

You have to do it more than once because the vulnerability is present more than once.

Apple changed the way that worked because of a recently discovered vulnerability that would allow a hacker to create an unprotected backup of an iOS device without the knowledge of the owner, so Apple add a requirement to always require a passcode to be entered on the phone before backing up to a computer. This to assure that the backup was intentional.

If you want details you can find them in these two links:

• From the discoverer of the vulnerability→CVE-2022-32929 - Bypass iOS backup's TCC protection · theevilbit blog
• From a disinterested 3rd party→iOS Backup Passcode Prompt-iMazing

@ Lchrist36 & @ Katana-San & @ Lawrence Finch

Most likely it has to do with this Apple article: iCloud data security overview ->

iCloud data security overview - Apple Support

scroll to -> Advanced Data Protection for iCloud

• If you enable Advanced Data Protection and then lose access to your account, Apple will not have the encryption keys to help you recover it — you’ll need to use your device passcode or password, . . . .

Published Date: December 13, 2022

The next screenshot if you follow the instructions on the screen:

I spent a good amount of time on the phone with an apple care support agent investigating this issue. The consensus was from her part that this was legitimate. This was the second call and honestly the first agent had absolutely no clue to what I was talking about and since I was traveling at the time my cell dropped off. The next rep seemed to have a clue and I was this time using the chat window on my MacBook to communicate the issue. She asked for a screen shot but that was above my skill level using the macbook. She concluded that it was a new step for security and said it was legit.

I gave up the # and the notification went away. Why this hasn’t happened to others in my circle with iPhones and ipads remains a mystery to me. Hopefully it is legit.

Bullshark1 wrote:

So, is anyone able to be conclusive of why we should give our password to ???? We have 5 other iphones in the family and mine is the only one that has a notification to “Confirm Iphone password “ . Why do they need it?? It is a 4 or 6 digit number which is much much easier to crack the code.???

Any phone that was updated to iOS 16.1 or higher will have this added security feature. Apple changed the way that worked because of a recently discovered vulnerability that would allow a hacker to create an unprotected backup of an iOS device without the knowledge of the owner, so Apple add a requirement to always require a passcode to be entered on the phone before backing up to a computer. This to assure that the backup was intentional.

If you want details you can find them in these two links:

• From the discoverer of the vulnerability→CVE-2022-32929 - Bypass iOS backup's TCC protection · theevilbit blog
• From a disinterested 3rd party→iOS Backup Passcode Prompt-iMazing

It is legitimate.

I also got the same message yesterday >Confirm iPhone code<.

Click Continue and follow the instructions on the screen.

There are several reasons it may ask for your passcode. One is if you initiate a backup or sync to your computer; that will specifically say “enter your passcode to back up (or sync)”. Another is if you haven’t used FaceID/TouchID for a while it may ask for your passcode to unlock the phone. And yet another is if you haven’t signed in to iCloud for a while. All of these are to protect your data; to make sure whoever is accessing iCloud or your saved data is really you. It is an important security feature of the Apple infrastructure that protects your personal information.

What are you doing when it asks you confirm with your passcode? It will ask every time you connect it to your computer, and also any time you connect it to power if your have it set to sync automatically and you also have sync over Wi-Fi. And that is for security reasons. If it happens at other times what are you doing when it happens?

It is legitimate. For some reason Apple’s security is concerned that your Apple ID may have been compromised, so it is asking you to verify from a trusted device by entering your passcode.

It will happen to anyone who updates to 16.2. It is to block a potential vulnerability that was discovered recently.

Not a hack, it is legit.

Normal and expected to see this message.

A day or so after updating to iOS 16.2, I received a pop up asking for my Apple ID password to continue using iCloud. I was suspicious, so I closed the message and went to settings where I saw a red badge. I Googled the message and saw that it seemed legit, so I tapped the badge and I opened the same request for my password, which I entered.

today (about two days later), a popup asked for my phone passcode to continue using iCloud. Again there was a red badge in settings, so after Googling again, I tapped the badge and entered my passcode.

Has anyone else been asked for your Apple ID password then a day or so later for your phone passcode?

I have my phone set to auto update but there was a new IOS that had not updated, i updated Saturday and so far it has taken care of the issue for me

Yes, not backups, but when you send personal data to a device that is not yours or your family if you have family sharing it will ask for confirmation.

It is legit. I saw it on my phone, but my wife did not see it on hers.