Enable-2FA.md

@@ -47,19 +47,7 @@ GitLab supports as a second factor of authentication:
    3. If you entered the correct pin, GitLab displays a list of [recovery codes](#recovery-codes). Download them and keep them in a safe place.
    4. Once downloaded, press **Proceed**
 
-## Steps to setup a WebAuthn device
-
-WebAuthn is an authentication standard supported by all major browsers (Chrome, Edge, Firefox, Safari). It allows to authenticate using physical keys (e.g., Yubikey hardware keys) or biometric mechanisms (e.g., macOS/iOS TouchID or Windows Hello).
-
-You need to have 2FA via TOTP first (the previous section).
-
-1. Navigate to https://gitlab.esa.int/-/profile/two_factor_auth
-2. Press **Set up new device** and select your preferred option in the browser pop up.
-
-   ![webauthn](uploads/d3ac2d2e05e0995ec9dc02002b025896/webauthn.gif)
-3. Follow the steps.
-
-## Error: “invalid pin code”
+### Error: “invalid pin code” 
 If you receive an invalid pin code error, this can indicate that there is a time sync issue between the authentication application and the GitLab instance itself. To avoid the time sync issue, enable time synchronization in the device that generates the codes. For example:
 
 For Android (Google Authenticator):
@@ -72,3 +60,15 @@ Go to Settings.
 Select General.
 Select Date & Time.
 Enable Set Automatically. If it’s already enabled, disable it, wait a few seconds, and re-enable.
+
+## Steps to setup a WebAuthn device
+
+WebAuthn is an authentication standard supported by all major browsers (Chrome, Edge, Firefox, Safari). It allows to authenticate using physical keys (e.g., Yubikey hardware keys) or biometric mechanisms (e.g., macOS/iOS TouchID or Windows Hello).
+
+You need to have 2FA via TOTP first (the previous section).
+
+1. Navigate to https://gitlab.esa.int/-/profile/two_factor_auth
+2. Press **Set up new device** and select your preferred option in the browser pop up.
+
+   ![webauthn](uploads/d3ac2d2e05e0995ec9dc02002b025896/webauthn.gif)
+3. Follow the steps.