On Monday, February 5th, two-factor authentication will become mandatory for accounts with privileges in any group/project in the "tpo" namespace. For details, see TPA-RFC-60: GitLab 2-factor authentication enforcement.