This is what happens if you lose access to your 2FA GitLab.com account

This post details a new, more secure process for resetting two-factor authentication (2FA) for GitLab.com accounts. The process moves away from relying on government-issued IDs to a risk-based approach involving classification of data access risk and a series of authentication challenges. The challenges are scored, and a minimum score is required for 2FA reset, depending on the account's risk classification. This process was developed collaboratively between the Support and Security teams.