Security

• Password storage
• Password length limits
• Restrict SSH key technologies and minimum length
• Rate limits
• Webhooks and insecure internal web services
• Information exclusivity
• Reset your root password
• Unlock a locked user
• User File Uploads
• How we manage the CRIME vulnerability
• Enforce Two-factor authentication
• Send email confirmation on sign-up
• Security of running jobs
• Proxying images

Securing your GitLab installation

To make sure your GitLab instance is safe and secure, please consider implementing Sign up restrictions to avoid malicious users creating accounts.