Gitlab Support is no longer processing MFA resets for free users
&gt; If you are caught where you are not able to provide your MFA token and without these backup methods, your account will be irrecoverable.<p>This seems absurd. I vaguely remember another SaaS tool I used that had this policy, but I don’t understand it. Even crypto exchanges allow recovery if you lose all traditional recovery methods by submitting documentation like your scanned driver’s license among a couple other pieces of info proving you are who you are.<p>If you offer MFA, I love the idea of following best security practices for users recovering their accounts when losing MFA devices&#x2F;tokens&#x2F;etc., but there has to be a “best practice” that includes recovering an account after a due diligence process has been followed proving who a user is who she says if she lost all normal recovery methods.<p>Edit: It does look like they have a different, less “fatal” avenue to recover work related accounts (“What if this is a work account?“ FAQ), but I’d still be scared to host my FOSS repos there and make a mistake only to lose my account forever.