This seems to be a major bug. Setting first.contentType = .newPassword and second.contentType = .password did not work for us. Apple should simply stop suggesting once customer selects "Choose My Own Password"

It would be great if Apple could give a precise Content-Type recommendation for the apple-app-site-association file. The documentation here no longer defines any Content-Type: https://developer.apple.com/documentation/xcode/supporting-associated-domains. As such, everyone now has to guess. Also, since the validator tool is missing in action (i.e. 503 service unavailable) https://search.developer.apple.com/appsearch-validation-tool/, it's hard to know if the content or Content-Type is valid. By contrast, Google gives a precise recommendation: https://developers.google.com/digital-asset-links/v1/create-statement Thanks for listening

Appears fixed in Xcode 26 beta 2 (17A5241o)