GitLab is implementing mandatory multi-factor authentication (MFA) for all users who log in with a username and password, enhancing security against credential stuffing and account takeover attacks. This rollout will occur in phases, and users will need to set up MFA proactively or risk being locked out of their accounts after a deadline.