Hi
Thanks for reaching out to the Community Forums!
It is possible that you received communication to add a passcode to your account if you do not already have one. However, if you received an email that told you to change your password by clicking a link, most likely this is a spam email that will take you to a fraudulent site to obtain personal and account information. Please contact us here before taking action—we’d like to review your account to verify the email you received.
Thanks!
Kevin, AT&T Community Specialist