Apple asking for ID security questions to thwart account breaches

Apple has recently started prompting iOS users to create three security questions and answers to make sure nobody's breaking into their account. The additional measure is stanadard practice, and considering your credit card information is associated to your account, this is a solid move to make. Some users may be understandable worried that this is a sneaky phishing attempt, but apparently the prompt checks out - some users are reporting iTunes is asking users for security questions too.

We got asked for them yesterday when setting up a new account in iTunes desktop, and The Next Web has seen them pop-up on the iPhone as well.

Has anyone received this prompt yet? Are they asking for any other security info? Are you happy about going through this extra step if it means better security or is it just one more annoyance between you and getting your apps?

Source: TNW

Simon Sage

Editor-at-very-large at Mobile Nations, gamer, giant.

More Posts

 

0
loading...
0
loading...
58
loading...
0
loading...

← Previously

iPhone 4S and iPhone 4 FREE color conversion giveaway!

Next up →

Byword vs. iA Writer vs. Elements: iPad text editor app shootout!

Reader comments

Apple asking for ID security questions to thwart account breaches

50 Comments

I guess it is nessary, but I rather not be bothered by more questions to asure my security. I guess because it is tied to mycredit card information I should be happy they are trying to safe guard my information.

They are doing this because rather than face the fact that little Timmy bought $4,000 worth of Slotomania coins. They call Apple and tell them someone stole their phone.

Downloaded an app and updated another app on my iPad today and no prompt.No prompt on iTunes either. SHRUG.

Thankfully, I'm smart enough to not provide my kids (who don't live with me) with an iPhone or iPad. Their mom can handle that.

Yes, I received this yesterday. Apple only ask you for some favourite questions and answers so they cn identify you in future, the questions can also be found and updated by going to http://appleid.apple.com, logging in and going to security.

How is this considered security if all the services ask the same questions. I only have so many first pets, 1st grade teachers, high schools, mothers maiden name, favorite vacation spot.
Now if one sites security is breached they can use that info to gain access to half my other accounts. Whats wrong with a good randomized password. This is insanity.

I got this prompt yesterday when I went to download a new app to my iPad. I didn't mind the prompt or having to select a set of questions (although the selections you get to chose from are crap). What I didn't like was what happened after I picked my questions and provided the answers. The system then asked me for an email address other than the one that I already had associated with my account. It then sent an email to that address that required I click a link to complete the process. Clicking the link then takes you to a website where you are asked to input your AppleID and Password.
1) This was way to many steps to have to go through to order an app.
2) The manner in which it was implemented felt very much like a phising trip. It would have been much better if they had simply asked me to go log into my account and update my profile.

I just realized why I didn't get this popup. I already have a secret question and Apple has all of my contact info. I did all of this when I got my iPhone last October. The hatches are battened down, as it were.

I got the prompt earier in the week on Monday when I purchased an app in the app store for $1.99 asking me to confirm the security code on the back of my credit card. I was wondering what was going on since I'd never seen it previously. Then I got another prompt yesterday for three security questions when I was doing an update to apps I had previously installed. Kind of weird, but I'll accept the invonvenience in order to protect my banking information.

I encounter this on the app store every time I try to download an app since yesterday. I aborted every time thinking it was a phishing scam. If it is legit at least we should have been informed

While extra security is nice, I do wish they would have different questions than you have for your bank. Not very helpful if you don't re-use answers to security questions (just like passwords shouldn't be re-used). Can't wait to see how really inconvenient this becomes.

sorry since apple has the whole closed/intergrated garden thing how could when you buy an app from their store could you get phising scam message??

I knew I shouldn't buy an Apple product but did it anyway. I don't have a credit card tied to their service and never will. I wanted to throw this ipad in the trash when it wouldn't let me download one stinkin' free app. Going to try boxing it back up and returning it to the store in the morning.

There's no info about this on Apple.com that I could find.
I've been getting error that it can't connect to iTunes all night. When I do get in, I get these security info prompts.
Smells suspicious. Why can't I answer these on your website Apple? Maybe you're already hacked.

I went to appleid.apple.com and signed in. Bad new people, they have no information on these new passwords! The only security question I found on the site available to answer is the old one identify question. To make matters worse, express lane has been down for hours! Most web sites seem to think this is a really from Apple, but my advise is take no chances. I have already put my password in twice from iTunes on my computer, but I did not answer the questions. This looks bad. I would advise have nothing at all to do with iTunes here forward until Apple makes a statement publically.

Just was downloading an update for Draw Something app for IPAD and asked for the security questions. I am concerned Apple has not issued a statement this is an added security measure. Please Apple let your users know. This is my first Apple product and would like to keep using Apple products.

Just got this on draw something also. I answered questions but I didn't put in my second email address, so I don't think you have to. I sure hope it's not phishing. I did at some point ask me for my apple ID/password a second time(was very hesitant). This would be a pretty major/obvious hack if it were a hack/phishing. The questions aren't too bad and ask for best/worst car, teacher...what city first kissed, favorite pet, etc (the questions seemed pretty good). Hope this helps someone. Apple please let is know...it's quite uneasy :/.

Are we sure this is not a phishing attempt???
I will not provide that info unless I see some announcement from Apple that this is their new security.
That is frustrating about Apple... Info is not forthcoming like it should be!

Agreed, while it seems on the surface to be legit, it seems extremely strange that Apple has had no official announcement of this security improvement... all of the iPhone blogs (including the great folks here) are citing the same original source-- none of which includes verification from Apple.
I'm all for security improvements, but this is a disappointing way to handle it.

Same thing happened to me when trying to purchase updates for a game, answered questions but didn't fill out the second email address, now it won't allow me to turn off my location services! Tried turning phone off and on. But to no avail..... Please help growing very concerned.

I too got this prompt. I went to the itunes site to verify it, but could find no supporting info. It would be nice if Apple had some easily accessible info on their site to verify this is legit. Or if they at least sent an email to ap users to give us a heads up.

I just called Apple and they said it's a new security program. The extra email is optional which it does say. If you don't put the optional email in it will default to your original email address. Also, I was told that the first original question you made when you first signed up will be replaced by the three new questions. So there you have it.

I was asked to answer 3new security questions today when I attempted to download a new app from the app store. While I think it's a good step to take, I too thought it might be a scam phishing attempt. I think they should have at least made an official email to all account holders or made an announcement on Apple to let everyone know this is legit. I was afraid to do it until I searched the web to find out it was official.

I have attempted to answer the three security questions multiple times today but it will not save. As a result I am not able to get any new apps. Tried to purchase and answer questions through iTunes and I get a message that says unexpected error occurs. Any ideas?

These seem to be new iOS security measures. If you go to Appleid.apple.com and manage your Apple ID you'll see these new questions in the right hand column. The only things I don't like is the fact that you can't create your own AND he fact that you need to provide yet another email for password retrieval. What if you don't have another email address?!!

Sounds to me like they have other intentions for your pii(personally identifiable information). Never did like giving answers to those questions. They could, in aggregate figure out a lot about you and your relationships with others. Still struggling with making so many things that were once private information.....available to a company

I'm having the exact same problem as VeryUpset (comment 30). There are also the following two threads I have seen with people experiencing the same problem:
https://discussions.apple.com/thread/3883785?start=0&tstart=0
https://discussions.apple.com/thread/3879679?start=0&tstart=0
I spoke to Apple literally for hours yesterday, but they were not aware the problem was more wide spread and thought it was my account. I have now sent them some updated info so hopefully they will realize it's an Apple system issue. BTW - when I went to my Apple ID (appleid.apple.com) it still had my old security question and was NOT update to the three question option. If anyone has a solution, please post.

It is perfect time to make some plans for the long run and it is time to be happy. I've learn this put up and if I may just I wish to suggest you few fascinating issues or suggestions. Perhaps you can write next articles regarding this article. I desire to learn even more issues about it!

Useful info. Fortunate me I found your web site unintentionally, and I am shocked why this twist of fate did not came about in advance! I bookmarked it.

It is in point of fact a great and useful piece of information.
I am glad that you shared this helpful information with us.
Please stay us informed like this. Thanks for sharing.
my weblog ... Address Book Conversion

See i just started getting this same pop up yesterday.. But wen i press on it.. It only has bubbles to fill in the answers to my security questions.. But i didnt choose them although they say choose a question... So i cant get any apps becayse i cant complete the questions.. If u know anyway to help please contact me by e-mail... bigislenchica808@gmail.com

I don't even know the way I ended up right here, but I thought this publish was good. I do not know who you might be however definitely you're going to a well-known blogger for those who are not already. Cheers!

I have learn a few good stuff here. Definitely worth bookmarking for revisiting. I wonder how much effort you put to make this sort of wonderful informative site.

I've not even had this iphone 4S for a week yet and I am soooo frustrated.....I've been able to download a few apps and then a pop up message saying I had to answer 3 security questions - I had to re-enter my apple ID a second time, I was only able to anwser two of the questions as the 3rd question won't list????? as I am unable to complete all 3 answers I cant get any apps.

It's actually a nice and useful piece of information. I am happy that you simply shared this helpful information with us. Please stay us informed like this. Thank you for sharing.

I am not positive where you are getting your info, but good topic. I must spend some time finding out more or figuring out more. Thanks for excellent info I used to be searching for this info for my mission.

I have an Itunes CSR working on this,I get 1 email a day and none of the instructions offered resolve this problem:I put in 3 question answers, and then get a blank screen on my Iphone 4. Nothing else happens. I cannot download any apps since the questions pop up appeared on my phone! I've grown beyond frustrated. I am told in each email what 'engineering' want me to try to do. I do that and still nothing works. It' like I'm begging to purchase an app or music, etc. and still cannot. Has anyone else incurred this same failure?