Alert user to account recovery vulnerabilty
Problem
On GitLab.com, many users have not created SSH keys so when they lose access to their account, they are not able to generate new recovery codes using SSH.
The user then has to contact support and answer a series of security challenges in order to regain access.
Suggestion
Could we create a persistent banner message displayed to GitLab.com users who don't create SSH keys which says something like "your account recovery options are at limited, create an ssh key today!" ?
Edited by Amanda Rueda