I received an e-mail asking for my password and other personal information. Is this legitimate, or is it a phishing scam?
A phishing scam message can come from any e-mail account. Any unsolicited message, especially one that includes a link or attachment, could be suspicious. You should not open attachments on click on random links in e-mails - especially if they are in messages you are not expecting. You can hover your cursor over links in e-mails to find out where they actually go - for example, a link to a Dropbox login page should take you to a dropbox.com page if it was legitimate, and not to web address you don't recognize (such as dropbox.xyz).
You should not reply in any way to e-mail messages that request information such as your password, PIN, birth date, credit card and bank account numbers, Social Security number, or any other sensitive information. No legitimate institution (including colleges and banks) will ask for these details over e-mail. If you receive an e-mail directing you to a phone number or website to provide this information, do not use the contact information or links provided in the message. Instead, contact the institution using their officially published phone number or website and ask for instructions.