I don't use password based login to GitLab. Unfortunately, they don't provide a mechanism to disable password login so I'm stuck with a credential out there which I don't use but grants access to my code base.

My response was to set it to the value returned by `dd if=/dev/random bs=1 count=128`

I don't know if that's any more secure than some other password, but it made me feel better.

#GitLab #InfoSec