@one Thanks but it will be the same. If someone goes to reset my password by entering my email on Gitlab and have access to my phone, then he can reset the password.

I am trying to find a way to separate the email for receiving notification emails (like pipeline fails from Gitlab) from the main email used for password reset. I think this would not be possible.