YubiKey-Guide
This guide allows you to use GnuPG and SSH to store credentials on a YubiKey and protect them with hardware-based cryptography. Private keys cannot be copied out of the device, and an offline Certify key is stored to refresh the keys. The document includes key transfer, backup, and tightening steps from media preparation to demand.
drduh · Authentication & Identity
Common commercial products in this category: Auth0, Okta, AWS Cognito
- You store your credentials for GnuPG and SSH hardwareally on YubiKey.
- You transfer signature, encryption and authentication subkeys to the device.
- With the help of the Certify key, you refresh or backup the keys.
- • No published release
- • NeutralGitHub Issue
Using two yubikeys not covered under guide
“So, this might require more feedback, as am currently flummoxed. If you want to use a Yubikey for Windows / MacOS / Linux login as part of a multi-factor authentication, then Yubico advises having a second Yubikey as backup. This works fine, since I can use a Yubikey Nano for…”
- • NeutralGitHub Issue
evaluate materials backup strategy
“Any particular reason not to use tar+gpg for backups? LUKS seems error-prone compared to a single command of encrypting a folder. Thank you for the guide, by the way.”