Locked out by 2FA I never set up — Pro team account, recovery case 01501990 - Help

Hi Vercel team and community,

I'm locked out of a Pro team account. At login I'm asked for a 2FA / recovery code that was never intentionally configured — no authenticator app was ever set up and I have no recovery codes.

What I've already tried:

Email + OTP login → still hits the 2FA wall
"Continue with GitHub" (the linked provider) → still hits the 2FA wall
CLI is installed but its token expired, so re-login hits the same wall
Completed the self-service "Recover account access without 2FA" flow. A verified recovery request was submitted and support case 01501990 was opened.

Context: I have full access to the account email and to the linked GitHub organization, and I can provide any proof of ownership needed. This is a team account with production apps affected, so it's time-sensitive.

Two questions:

Could a staff member please help escalate case 01501990?
To anyone who's been locked out by a 2FA they never set up: how long did resolution take, and did anything help speed it up? Also — could this be team-level 2FA enforcement rather than something I enabled myself?

For security I'm not posting the account email here, but I'm happy to share any details privately with staff. Thanks a lot for any help.

Hi there! I'm just a bot here to share some info that might help you before a human arrives.

If your account is eligible, you can use our new self-service recovery flow:

Go to vercel.com/login
Choose to sign in using the email + one-time password (OTP) option.
Select Use another sign-in method
Verify your identity using the GitHub, GitLab, or Bitbucket account previously linked to your Vercel account
Follow the remaining prompts to complete the recovery process

If you've ever set up a passkey, possibly on another device, you can use that to get back into your account and update 2FA settings yourself. You can also use recovery codes if you've stored those in a safe place that you can still access.

If you are unable to access your account using the steps above, you can open a support case using the Start 2FA recovery option on the Two-Factor Authentication login screen. Please do not publicly post account details, like your email address, that could help an attacker gain access to your account in the future. There's no need to open an additional case if you already have one open.

Thanks for your patience while the team works to resolve all cases as quickly as possible while keeping everyone’s accounts safe and secure. A human should be here soon to help.