Alert user to account recovery vulnerabilty

Problem

On GitLab.com, many users have not created SSH keys so when they lose access to their account, they are not able to generate new recovery codes using SSH.

The user then has to contact support and answer a series of security challenges in order to regain access.

Suggestion

Could we create a persistent banner message displayed to GitLab.com users who don't create SSH keys which says something like "your account recovery options are at limited, create an ssh key today!" ?

Edited Oct 31, 2019 by Amanda Rueda
Assignee Loading
Time tracking Loading