iPhone has been removed as a trusted device?

This has happened twice to me know, in the past three or four months.

I'm reasonably happy that the account has not been compromised, although have the changed password anyway. Is the some kind of auto renewal date, or similar. Seems a bit odd.

Can you lookup login IPs for your account? I've looked around to no avail.

This just happened to me as well this morning. My account does not appear to have been compromised in any way, but I got a notification on my iPad that something had changed, then an email from Apple saying that my iPhone had been removed as a trusted device since I had erased it (which I hadn't - in fact, when I re-added it as a trusted device, there was no issue instantly receiving my verification code on it).

I changed my password, of course, just to be safe, but this looks suspiciously like an Apple screw-up.

Regards checking account activity, the only way I found was to call them. They confirmed that there was no activity, and were very helpful and apologetic.

It's a bit frightening, but if you think it through, there's actually no way the account could have been signed in without the two step request being sent and received. Or is there? The whole idea of two step verification is that this cannot happen, isn't it?

Yes, exactly, that's what I thought - the peace of mind provided by two-step verification certainly seems a little more fragile if one of your trusted devices can be removed with no intervention from you!

I'll give them a call tomorrow and double-check there was no suspicious activity, since there's no way to check that on the web site (and there really should be - that was REALLY helpful when someone in China got hold of my old Microsoft login and tried to use it; I was alerted and could see a list on their web site of all login attempts and where they originated from, complete with map!)

This just happened to me. For no apparent reason, my iPad was automatically removed. I did not reset, update, or otherwise change anything about my iPad 3.

My account wasn't compromised - that part of the email is highly misleading. If my device has "automatically" been removed, then that clearly indicates the removal was not done by a malicious 3rd party, but by Apple themselves. I reset my password anyway.

2 stage verification right now is entirely dependent on my iPhone 6 - should I drop that in water, I'm going to be locked out!

I tried adding my phone number but Apple's SMS-sending doesn't work, I never get the SMS (I'm in Thailand, which by the way doesn't stop other services from sending me verification SMS).

This happened in my family on June 30, 2015. Then it happened again this evening. After researching the issue online (including this thread), I decided it was time to contact Apple support. I had the exact same concern as apple_joel: what does "automatically" removed mean?

I started the support request online & I received a phone call within less than two minutes. I spoke with two different techs, both of whom were extremely nice. I kept asking for an explanation of what would trigger an "automatically removed" email. The second, higher-level tech, looked into it & then finally explained that this is a glitch on Apple's end. He reassured me that, in our case, there was no security breach. But he did say we could go ahead & change the password just to be safe if we wanted to.

He took my information and said that someone may contact me if there is a resolution. "Glitches" like these are a little scary, but I do appreciate the honest explanation I received.

This occurred to me this past Monday morning on my iPod (iPod Touch removed). No breaches of my account, no unusual activity on any of my 3 devices (iPod Touch 5gen, iPad Mini, Apple TV). I re-added it easily online, but I have to say....

"Automatically" removing a trusted devices as a result of a "glitch" is inexcusable. There should be an event that Apple can identify, or time-based event (device hasn't been used as trusted device in X days/weeks/months). "Just reset your password to be safe" is silly advice. Strong passwords and two-step authentication should be sufficient to protect an account. We should not have trusted 2nd factor devices removed requiring a login to the site to change security details. Period.

Shame on you, Apple. You should have better answers to these events.