But last night, I couldn’t remember my iCloud password. I was on my phone trying to buy an app and got my password wrong a few times. So I clicked on reset password...and it just asked me my phone password and then let me set a new one. Usually I have to answer security questions to set my new password but this one it didn’t make me do that. It seems odd to be able to set a new password only needing to know my phone password. When did this change start? Also, is there any other protection I am not thinking of. I don’t remember which phone I was using.