United suffered a significant data hack at the end of 2014. Miles are regularly for sale on the Darknet. So IT security is something that many programs are doing more than paying lip service to. Hilton even gave out points for changing your password.
I’ve seen this header at the top of my United MileagePlus account for awhile and pretty much ignored it. Perhaps you’ve logged into yours, gotten a notice about a password or security questions and ignored it too. I talked to United about it — they gulped a bit that I’ve been ignoring it, like millions of other MileagePlus members. And it’s time not to ignore.