If you set up a device, also set up a TOTP so you can still access your account if you lose the device. This performs secure authentication on your behalf. You supply your username and password to sign in. You’re prompted to activate your WebAuthn device (usually by pressing a button on it) when Codes are generated by your one-time password authenticator (for example, a password Time-based one-time passwords ( TOTP).

GitLab supports as a second factor of authentication:

Your account, they would need your username and password and access to your second factor of authentication. Two-factor authentication (2FA) provides an additional level of security to your GitLab account.

Error: “invalid pin code” Two-factor authentication.

Have two-factor authentication disabled on your account.

Regenerate two-factor authentication recovery codes.

Enable one-time password using FortiToken Cloud.

Enable one-time password using FortiAuthenticator.

Use personal access tokens with two-factor authentication.

Yubikey google authenticator