The new process requires you to sign in with a username and password and to choose whether or not you want to add extra security measures.
How do I know if an email I received is legit?
Do not respond to emails that request personal information, reputable businesses never ask for personal info.