“Reset Password” - unprompted pop up (not sms)


This has happened to me before. I use extremely strong passwords and I use 2FA for most things.


Once again, I received this pop-up (both on my iPhone and Apple Watch, almost at same time). It’s not a text message, but an Apple pop-up, where the only way to bypass the request is to click Allow or Don’t Allow. There was an older (now closed) thread, but the “best reply” was just a guess and a follow up question, so how on earth is that question considered answered!. Everyone was saying to just “ignore” the pop-up, but it is a system prompt that requires the user to select either Allow or Don’t Allow.


Now I believe this is 2FA actually working. Meaning I think someone has my user ID and not my password, and requesting a password change prompted the 2FA as it should. So first question is: is that correct.


I selected “don’t allow” and nothing further happened, but I don’t know what that actually did? Did I compromise my phone?


What would have happened if I chose “allow?”


again the system prompt was a pop-up and an option needed to be selected. Thanks!



iPhone 12 Pro Max, iOS 18

Posted on Mar 28, 2025 6:46 PM

Reply

Similar questions

1 reply

Mar 28, 2025 11:42 PM in response to Brecraure

I would recommend you to...

Change your Apple Account password on your iPhone, iPad, Apple Watch or Apple Vision Pro. Tap Settings > [your name] > Sign-In & Security. Tap Change Password. Enter your current password or device passcode, then enter a new password and confirm the new password.


Change your Apple Account password - Apple Support (IN)



Apple accounts (Apple IDs) can be compromised through multiple avenues beyond iOS devices. Here are some common ways attackers can gain access:


1. Windows PCs

  • Keyloggers & Malware: If an Apple ID is used on a compromised Windows PC, malware or keyloggers can capture login credentials.
  • Phishing Emails & Fake Websites: Attackers often send emails pretending to be from Apple, tricking users into entering their credentials on fraudulent sites.
  • Man-in-the-Middle (MITM) Attacks: If a Windows PC is connected to an insecure or compromised network, attackers can intercept login details.


2. Web Browsers

  • Phishing Websites: Fake Apple login pages can trick users into entering their credentials.
  • Credential Stuffing: If the user’s Apple ID password is the same as one from a previous data breach, attackers can use automated tools to try those credentials on Apple’s login page.
  • Browser Extensions & Spyware: Malicious browser extensions or spyware can capture saved passwords or typed credentials.


3. Other Devices (Macs, Android, etc.)

  • Public/Shared Computers: Logging into an Apple ID on a public or shared computer without logging out properly can leave credentials exposed.
  • Compromised Android Devices: If an Apple ID is used in Apple Music or iCloud on an Android device with malware, login details can be stolen.
  • Weak Security on Other Devices: If an Apple ID is linked to an email account that lacks strong security (e.g., no two-factor authentication), an attacker could gain access by resetting the Apple ID password.



If you feel an unauthorized person/app is remotely using, controlling or monitoring your device, then that is possible only if you have done one or more of the following Don'ts...


  1. Don't hand over an iPhone to kids or to a stranger without Enabling Guided Access
  2. Don't share Apple IDs
  3. Don't Jailbreak
  4. Don't share sensitive information pertaining to your device
  5. Don't give in to Phishing
  6. Don't plug in your device in Airports and Public places through third-party cables and trust the device. Beware of Juice Jacking. (Especially in India)
  7. Don't leave your iPhone unlocked and unattended in public places like offices, schools, malls, etc.


If one of the above is true then quickly change the Apple ID Password and Return iPhone settings to their defaults.



How to Protect Your Apple ID

✅ Enable Two-Factor Authentication (2FA) to require a second verification step.

✅ Use Strong, Unique Passwords that are not reused across other accounts.

✅ Monitor for Phishing Emails & Messages and verify URLs before entering credentials.

✅ Check for Unauthorized Logins via Settings > Your Name > Password & Security > Devices on an iPhone/Mac.

✅ Use Security Keys for Apple ID to add an extra layer of protection.

✅ Avoid Logging in on Untrusted Devices unless absolutely necessary.



If you're concerned that an unauthorised person may have access to your Apple Account, these steps can help you regain control of your account.


If you think your Apple Account has been compromised




This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

“Reset Password” - unprompted pop up (not sms)

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.