When downloading a new app from the App Store, a user will now be prompted to set up three security questions and to give an alternate email address. This may happen in either iTunes or the App Store, some are saying they getting it in both.
After completion it’ll ask to verify that email:
You’ve taken the added security step and provided a rescue email address. Now all you need to do is verify that it belongs to you.
The rescue address you have given us is email@example.com. Just click the link below to verify, sign in using your Apple ID and password, then follow the prompts.
The rescue email address is dedicated your security and allows Apple to get in touch if any account questions come up, such as the need to reset or change your security questions. As promised, Apple will never send you any announcements or marketing messages to this address.
Good to know Apple is continually upping its security for its users.