I have noticed I get more e-mails from Steam related to resetting my password. They do appear legitimate, however I am not the one resetting my password. I am still able to log in just fine. I am guessing this is some outside source that is trying to hack into accounts and sending out password resets to see what they can get a hold of? I already changed my password a couple months back. Is the best thing just to ignore these e-mails? I am also going to start using 2-step verification on the e-mail assigned to my account. I changed my e-mail password back when the heartbleed bug came about.