Popup from Apple for password.

[romanof]

This site needs a security forum. That is about the most important thing on the agenda these days.

Anyway

I suddenly got a popup on three Apple devices something along the lines of "Verify your password for better usage." Something like that. Since it came from Apple I filled out my password and almost hit enter when I suddenly broke out in a cold sweat. I had ALMOST replied to a request out of the blue for my password!!!

I backed out and got on another device that had the same popup, looked at it from all directions. It takes me to Settings and the legitimate password change page, and in all ways looks like it came from Apple. There is no URL to examine in the normal way and I am not a computer forensic analysys by a long shot.

Since it has been years, I decided to change it anyway and make it much longer, but doing it manually, so to speak.

Was this a legitimate popup? I have never seen it before. I can't decide. And if so, then Apple is violating the concept of never enter your password from a sudden popup/email/message/etc.

 

[boswald]

Most likely a phishing attempt of some kind. Apple never asked me for my password and I've been with them for years. Especially out of the blue like that! I'm glad you changed it "the hard way" though. Who knows what would've happened if you went through with it through the popup. My mom would've fallen victim to it for sure.

 

[romanof]

I am still looking at it on my MacBook (With wifi turned off in case I screw up). It doesn't lead to a URL as you expect for a phish, but straight to the Settings/Name/Signin Security. The case against malware is that it appeared on MacOS, iOS, and iPadOS on the same day. I take lots of caution about being had, but for all three OSes to get hit a the same time would be hard to believe. It isn't requesting a change of password, but a verification of such, either of which would be great for scammers. And it would require a code sent to a trusted device, then entered before it would take effect and all the other devices would get a message about the change.

My thought was that since my password is years ((and years) old maybe it is Apple advising to check. But Tim Cook will have to show up at my door and verify such before I am going to fill out the field and press enter.

Still mystified.

 

[Harddrive]

I change my password in system settings trust nothing.I believe you will receive an email from Apple saying your password has been updated if this is not you please contact Apple.

 

[tonmischa]

Can you post a photo/screenshot?

EDIT 2: I had some links here that linked to unrelated pop-ups. I removed them to keep this thread clean.

 

[romanof]

Here it is again. All devices signed out and back on with new passwords, accepted with sent security codes. Then a couple of hours later I click on podcasts and get the following...

 

[Apple_Robert]

Here it is again. All devices signed out and back on with new passwords, accepted with sent security codes. Then a couple of hours later I click on podcasts and get the following...

That is normal Apple behavior.

 

[BotchQue]

I got the exact same message about 3 months ago, except I did the bolded steps which I added to your post:

...I suddenly got a popup on three Apple devices something along the lines of "Verify your password for better usage." Something like that. Since it came from Apple I filled out my password and almost hit enter when 10 seconds later I suddenly broke out in a cold sweat. I had ALMOST replied to a request out of the blue for my password!!!
...

It was after Happy Hour here, and I realized I probably just screwed myself over big time! I panicked, and posted about it here immediately, and I got some great advice about covering my tracks/changing passwords immediately, which I did.
That was three months ago, and my Apple account has had no interference (I keep my investments/banking separate, and don't use Apple Wallet or Credit (they do have my normal CC number, which I can cancel at any time). That scared me, and I've been kicking myself ever since.

How a separate entity can throw an Alert out, simultaneously, on 3 different Apple OS's like that, as you said, I have no idea. You were very smart to inquire here before following thru; hopefully you can provide screenshots etc to Apple, I cleared every cache and password I could, at the time. Good luck!

 

[tonmischa]

It's good to be careful. And you did good by thinking twice and asking before entering your credentials.

But in this case I agree with:

That is normal Apple behavior.

This is NOT a phishing attempt. This is a genuine Apple prompt.

 

[romanof]

Ok. Glad to hear that it is a Apple caused, but still seems strange to me after warnings from everywhere and everyone that ""We will never ask for your password." But my concern is the fact that I almost entered my password at a sudden prompt, even after my often-given scorn at some clueless noob falling for such an obvious trick. Actually, concern is not the proper word - p*ssed off at myself is more accurate.

 

[tonmischa]

I am still trying to find the official Apple Support document that describes this. (Apple Support site is so unintuitve to search 😉 )
The prompt usually appears after changes (system updates, AppStore updates) or longer phases of inactivity.
(I mentioned I am an admin for 80 Macs and also some iPads.) Our devices are not allowed to connect to the internet, so Apple _thinks_ they are inactive and they show me this prompt every few months.

Again: It is good to be careful and think twice and this will probably not happen to you again. But having ALMOST given some info out probably happens to everyone at least once. Don't be too hard on yourself! Cheers.