Why did I unexpectedly get a notification on my iPhone that says "Use this iPhone to reset your Apple ID password."?
What happened?

This is actually a widespread issue that was reported by others on macrumors' forums yesterday. Likely we'll see this happen to more and more iPhone users.

This Twitter Thread explains that there is a security flaw in Apple's password reset process which gives explicit confirmation once a correct phone number is inputted for a given Apple ID.

It shows a failure for an incorrect number:



And triggers a notification to your devices for a correct number:



This notification is what caused your iPhone to prompt you to reset your Apple ID password.

What does this mean?


Your Apple ID was not broken into.


It's good practice to update your passwords periodically anyway.

An attacker now knows your Apple ID and corresponding phone number.


I'm not certain what they'll do with this information, but it's valuable.