# GitLab: Login failures when using email-based 2FA on GitLab.com

- Impact (vendor’s label): major
- Status: resolved
- Started: 2026-04-01 07:18 UTC · Resolved: 2026-04-01 19:38 UTC · Duration: 12 h
- Updates: 6 · Affected components: Website
- [Vendor status page: https://status.gitlab.com/pages/incident/5b36dc6502d06804c08349f7/69ccc6baf8ac3b10d21a920d](https://status.gitlab.com/pages/incident/5b36dc6502d06804c08349f7/69ccc6baf8ac3b10d21a920d)
- [Company: GitLab](https://rewindex.com/company/gitlab.md)

## Timeline of updates

- **investigating** 2026-04-01 07:18 UTC: Multiple users are unable to log in when using two-factor authentication via email. Several customers and users raised the issue. We are actively investigating logs to identify patterns in sign-in endpoint requests and confirming the issue is limited to 2FA via email.
- **investigating** 2026-04-01 08:55 UTC: The incident remains under investigation. The scope is confirmed as affecting only free-tier users attempting to log in with email-based 2FA. Details can be found in: https://gitlab.com/gitlab-com/gl-infra/production/-/work\_items/21683
- **investigating** 2026-04-01 10:09 UTC: No material updates on resolution. We continue investigating logs to identify the root cause. Details can be found in: https://gitlab.com/gitlab-com/gl-infra/production/-/work\_items/21683
- **investigating** 2026-04-01 11:31 UTC: Investigation is ongoing. We are narrowing down potential causes and will provide an update once we have more to share. Details can be found in: https://gitlab.com/gitlab-com/gl-infra/production/-/work\_items/21683
- **monitoring** 2026-04-01 12:45 UTC: The incident has been mitigated. Users should now be able to log in with email-based 2FA. We continue investigating the root cause and will provide further updates. Details can be found in: https://gitlab.com/gitlab-com/gl-infra/production/-/work\_items/21683
- **resolved** 2026-04-01 19:38 UTC: After a period of monitoring we have not seen a recurrence of the issue and consider it resolved.

## Rewindex changes for this incident

- 2026-04-01 07:18 UTC: [Major incident: Login failures when using email-based 2FA on GitLab.com](https://rewindex.com/change/ied96756c678607.md)


---
Canonical: https://rewindex.com/company/gitlab/incidents/69ccc6baf8ac3b10d21a920d · Markdown: https://rewindex.com/company/gitlab/incidents/69ccc6baf8ac3b10d21a920d.md · JSON: https://rewindex.com/api/v1/companies/gitlab/incidents/69ccc6baf8ac3b10d21a920d · Generated 2026-10-18T12:19:45.735Z