To ensure the security of our infrastructure, code repositories, and credentials, Two-Factor Authentication (2FA) is strictly mandatory for all members of this GitLab instance.

• Requirement: Every team member must enable 2FA on their GitLab account before requesting access to private groups or pushing code.
• Grace Period: New accounts have a maximum grace period to configure 2FA. Once expired, access via web and Git operations over SSH/HTTPS may be temporarily locked until 2FA setup is complete.
• Setup Guide: Follow the official step-by-step instructions:
  GitLab Two-Factor Authentication Documentation

Important Notes:

1. Save Recovery Codes: During the 2FA setup, download and store your recovery codes in a secure password manager (e.g., 1Password, Bitwarden, KeePass).
2. Git Over HTTPS: If you interact with Git repositories via HTTPS, standard passwords will no longer work once 2FA is active. You must generate and use a Personal Access Token (PAT) with appropriate scopes, or switch to SSH keys.