Hacker GitHub

← All repos

drduh/YubiKey-Guide

View on GitHub ↗ ★ 13,062 HTML

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

59 mentions on Hacker News by 38 people: 7 stories, 52 comments · first 2016-02-02 · latest 2026-10-30

Mentions per year 59 mentions · busiest year 2019 (13)
20082026
AllStoriesComments NewestTopOldest
  1. I have been using Yubikeys for years, according to this guide: https://github.com/drduh/yubikey-guide The nice thing is that using the private key requires physical touch. That means that AI itself (or a remote attacker, for that matter)…
    comment by jwr · 2026-10-30 · in Binance-hacker-1029 – $5.6B stolen from Binance
  2. …in, but not as the only one. I have been using YubiKeys for many years now, following this guide: https://github.com/drduh/YubiKey-Guide This means I can have secure private keys for ssh and gpg (cue the crowd saying gpg is insecure…
    comment by jwr · 2026-10-21 · in Setting Up SSH Keys on macOS with Touch ID
  3. For Yubikey, this guide is worth looking at: https://github.com/drduh/yubikey-guide ("Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.")
    comment by rehevkor5 · 2026-04-16 · in Put your SSH keys in your TPM chip
  4. …my secret keys printable if needed. And I want to store them securely on YubiKeys once generated ( https://github.com/drduh/YubiKey-Guide ). I want to be able to encrypt my backups to multiple recipients. And I want the same keys (stored…
    comment by jwr · 2025-12-28 · in Gpg.fail
  5. This is a good moment to remind everyone of this excellent guide: https://github.com/drduh/YubiKey-Guide it describes how to use your YubiKeys (please always use at least two, so that you have a backup) for GnuPG keys and SSH. I've been…
    comment by jwr · 2025-11-24 · in Native Secure Enclave backed SSH keys on macOS
  6. At https://github.com/drduh/YubiKey-Guide?tab=readme-ov-file#co... , these options are not the most secure one. personal-cipher-preferences CHACHA20 AES256 AES192 personal-digest-preferences BLAKE2B SHA512 SHA384 SHA256…
    comment by johnisgood · 2025-11-24 · in Native Secure Enclave backed SSH keys on macOS
  7. This guide [1] mostly follows the practices the previous poster outlined. [1] https://github.com/drduh/YubiKey-Guide
    comment by atrettel · 2025-11-24 · in Native Secure Enclave backed SSH keys on macOS
  8. Nothing specific to pass. It’s just Yubikey setup with GPG; that’s part of the appeal! https://github.com/drduh/YubiKey-Guide This guide covers many adjacent topics; the relevant part is generating the secret key inside Yubikey, or in an…
    comment by aborsy · 2025-09-14 · in Pass: Unix Password Manager
  9. …I only ever have to unlock a single secret, which in my case is my GPG keys on my Yubikey devices: https://github.com/drduh/YubiKey-Guide
    comment by jxpx777 · 2023-10-16 · in Organizing multiple Git identities
  10. …Yubikey gives out. FIDO2 and all other regular Yubikey functionality still work with it. [1]: https://github.com/drduh/YubiKey-Guide
    comment by woadwarrior01 · 2023-09-29 · in Ask HN: Why does YubiCo need my private key?
  11. The excellent guide by drduh should be mentioned here: https://github.com/drduh/YubiKey-Guide — I've been using this approach for years to store my OpenPGP keys on Yubikeys and use them for SSH. I don't generate my keys on devices. That…
    comment by jwr · 2023-09-15 · in An Opinionated Yubikey Set-Up Guide
  12. If you are looking to do something similar with a Yubikey check out https://github.com/drduh/YubiKey-Guide for getting started. It is by far the most comprehensive guide on using a YubiKey as a SmartCard for storing GPG keys. I used this a…
    comment by jdoss · 2023-03-28 · in OpenPGP master key on Nitrokey Start
  13. According to this: * https://github.com/drduh/YubiKey-Guide#configure-smartcard ... it is: gpg --card-edit
    comment by upofadown · 2023-03-10 · in How to Yubikey
  14. …Keys stored on the Yubikey and used as the SSH keys. Check the Repo of drduh as a starting point https://github.com/drduh/YubiKey-Guide#ssh
    comment by MadQ · 2023-03-10 · in Secretive: Store SSH Keys in the Secure Enclave
  15. There's a fairly excellent guide on creating a robust key system here: https://github.com/drduh/YubiKey-Guide . Primary and backup Yubikey for use, offline cert keys, and paper backups. If you're wanting to protect things further you can…
    comment by kimburgess · 2023-03-10 · in Secretive: Store SSH Keys in the Secure Enclave
  16. …0 issues with it on Linux. Just followed the arch wiki setup and this random guide I found: https://github.com/drduh/YubiKey-Guide . I use it daily to ssh into hosts and sign git commits. On Windows, it's a bit more involved, of course,…
    comment by vladvasiliu · 2023-02-22 · in Passwordless authentication with FIDO2–beyond just the web
  17. You can check this guide: https://github.com/drduh/YubiKey-Guide
    comment by krmbzds · 2023-01-28 · in Russhian Roulette: 1/6 chance of posting your SSH private key on pastebin
  18. And I’d though everyone else also kept their gpg and ssh keys on Yubikeys[1]. [1]: https://github.com/drduh/YubiKey-Guide
    comment by woadwarrior01 · 2022-08-13 · in The Zoom installer let a researcher hack his way to root access on macOS
  19. That's why I prefer using Yubikeys (using this setup: https://github.com/drduh/YubiKey-Guide ) — and this method times out immediately (just press esc when the "insert card" dialog comes up). Plus you can have multiple keys. Plus you can…
    comment by jwr · 2022-06-15 · in Quick Tip: Enable Touch ID for Sudo (2020)
  20. …my keys for at least two years. But the right approach anyway is to use this excellent tutorial: https://github.com/drduh/YubiKey-Guide and generate your keys yourself, storing a backup in a secure location. This is what I do — so even if…
    comment by jwr · 2022-06-07 · in Apple Passkey
  21. …don't want to use GPG, the guide also has a section[2] about just using an SSH key as well. [1]: https://github.com/drduh/YubiKey-Guide [2]: https://github.com/drduh/YubiKey-Guide#ssh
    comment by seodisparate · 2022-05-30 · in How to Store an SSH Key on a Yubikey
  22. …the PGP applet of the YubiKey, which exposes a regular RSA key. This guide has worked well for me: https://github.com/drduh/YubiKey-Guide You can jump to the SSH sections if that's all you're after. There's a missing piece for Windows,…
    comment by vladvasiliu · 2022-05-30 · in How to Store an SSH Key on a Yubikey
  23. …a GPG key stored on a YubiKey[1] and even if you comprise the machine you don't get the keys. 1. https://github.com/drduh/YubiKey-Guide
    comment by deadbunny · 2022-05-05 · in GitHub will require 2FA by the end of 2023
  24. This community ran GitHub guide is a bit more up to date, and has troubleshooting in the Issues: < https://github.com/drduh/YubiKey-Guide >
    comment by grlass · 2022-04-12 · in Yubikey All the Things
  25. Covered by the guide: see https://github.com/drduh/YubiKey-Guide#using-keys and look for "Encrypt a message to your own key". Also, sops ( https://github.com/mozilla/sops ) works with gpg and so with Yubikeys.
    comment by cuu508 · 2022-01-26 · in Guide to Using YubiKey for GPG and SSH
  26. …be done with yubikey. Passwords stored encrypted on disk and get decrypted on the yubikey with gpg. https://github.com/drduh/YubiKey-Guide https://attackpointsecurity.com/go-pass-yubikey-and-gpg
    comment by macrolime · 2021-12-27 · in Ask HN: How did my LastPass master password get leaked?
  27. …which allows you to both use it to sign or encrypt with gpg and also to use it as an ssh key. [1] https://github.com/drduh/YubiKey-Guide
    comment by oddlama · 2021-10-13 · in Secretive: An app for storing and managing SSH keys in the Secure Enclave
  28. Yep, I followed the guide here: https://github.com/drduh/YubiKey-Guide Means I can SSH into any box that has that key on it, or push/pull repos from anywhere as long as I have a yubikey with me. I also used…
    comment by bennyp101 · 2021-05-19 · in Security keys are now supported for SSH Git operations
  29. https://github.com/drduh/YubiKey-Guide
    comment by OminousWeapons · 2021-05-19 · in Security keys are now supported for SSH Git operations
  30. Anything similar to https://github.com/drduh/YubiKey-Guide for what you have just described? I am willing to use what I can understand, backup and operate, and yubikey+gpg seems to be it because of this guide. Anything practical for what…
    comment by motiejus · 2021-02-13 · in FIDO2 security key company releases hardware that's open source and uses Rust
  31. …you are interested in a fantastic walk through of using a Yubikey with your GPG/SSH keys check out https://github.com/drduh/YubiKey-Guide I am also really looking forward to the YubiKey Bio getting released too.
    comment by jdoss · 2021-01-21 · in Unlocking LUKS2 Volumes with TPM2, FIDO2, PKCS#11 Security HW on Systemd 248
  32. …if (like me) you only store your secret keys on a physical device, as described for example here: https://github.com/drduh/YubiKey-Guide , then you have nothing to worry about, because your secret key does not reside anywhere where it's…
    comment by jwr · 2020-08-18 · in Mailto: ?attach=~/ parameter allows including arbitrary files on disk
  33. YubiKeys are absolutely fantastic, and under-rated, too. I used this guide: https://github.com/drduh/YubiKey-Guide to set up my YubiKeys with GPG keys that are also used as SSH keys. This gives me, in a single setup: * secure 2FA for sites…
    comment by jwr · 2020-06-18 · in Getting the most out of YubiKeys for your business
  34. …bunch of Yubikeys, minimum of 2. 2. Create GPG keys and store them on YubiKeys. Follow this guide: https://github.com/drduh/YubiKey-Guide (if you want to, keep the secret keys, but in case of multiple YubiKeys I would not keep them…
    comment by jwr · 2020-06-02 · in Ask HN: How does your company manage its encryption keys?
  35. Windows users might find this useful: https://github.com/drduh/YubiKey-Guide
    comment by sebazzz · 2020-05-11 · in Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
  36. Nice repo. For those starting from scratch with a YubiKey I always recommend this guide: https://github.com/drduh/YubiKey-Guide Then they know how this stuff works and how to fix it when it breaks.
    comment by dkanejs · 2019-11-13 · in Show HN: GPG on macOS and YubiKey
  37. …over generating a "classic" private/public keypair with for example a Yubikey [1]? [1] https://github.com/drduh/YubiKey-Guide
    comment by darkwater · 2019-11-05 · in OpenSSH's Support for U2F/Fido Security
  38. There's also DrDuh's pretty comprehensive guide https://github.com/drduh/YubiKey-Guide
    comment by cuu508 · 2019-10-31 · in Getting Started with Security Keys
  39. …steal my Yubikey (and know the PIN on it). If interested, I followed this guide to set it up: https://github.com/drduh/YubiKey-Guide/blob/master/README.md
    comment by PureParadigm · 2019-10-27 · in Public keys are not enough for SSH security
  40. …moving to Yubikey, then restore and repeat move to a new Yubikey). This is the guide I followed: https://github.com/drduh/YubiKey-Guide
    comment by eaguyhn · 2019-10-17 · in Stupid Unix Tricks
  41. …would let me use my existing (excellent) setup for using GPG keys stored on a Yubikey for ssh (see https://github.com/drduh/YubiKey-Guide for a great writeup of this approach).
    comment by jwr · 2019-06-11 · in Support for U2F security keys
  42. Another plug for: https://github.com/drduh/YubiKey-Guide
    comment by odensc · 2019-04-03 · in Using a Yubikey as smartcard for SSH public key authentication
  43. If you are OK with using PGP keys, there is an excellent guide at https://github.com/drduh/YubiKey-Guide — I've been using this kind of setup for almost a year now and it works really, really well. Highly recommended. Be sure to set the…
    comment by jwr · 2019-04-03 · in Using a Yubikey as smartcard for SSH public key authentication
  44. …drduh's guide mentioned above. In particular, for the touch feature there is this subsection: https://github.com/drduh/YubiKey-Guide#touch-to-authenticate See also: https://developers.yubico.com/PGP/Card_edit.html
    comment by tanderson92 · 2019-03-09 · in Using a Yubikey as smartcard for SSH public key authentication
  45. …of the post, and dismissed with "I did not like that very much"), see also drduh's Yubikey guide: https://github.com/drduh/YubiKey-Guide#ssh Note that the PIV approach used in the OP does not support RSA4096, while the OpenPGP approach…
    comment by tanderson92 · 2019-03-08 · in Using a Yubikey as smartcard for SSH public key authentication
  46. I'm not sure but it would come down to if openpgp supports that. A quick Google shows this: https://github.com/drduh/YubiKey-Guide I didn't read everything but it seems pretty comprehensive.
    comment by nickjj · 2019-02-21 · in Password Managers: Under the Hood of Secrets Management
  47. Here’s a decent guide: https://github.com/drduh/YubiKey-Guide PS I’d love to get some shoved into my hand. Paid $100 for my pair.
    comment by tempotemporary · 2019-02-18 · in Ask HN: Do you use a GPG key with GitHub?
  48. > It seems to me that my YubiKey setup (done following https://github.com/drduh/YubiKey-Guide ) is substantially better in almost every respect than the state-provided smartcard. Would you care to explain the differences in detail? As far…
    comment by Boulth · 2018-09-18 · in GnuPG can now be used to perform notarial acts in the State of Washington
  49. …setup with private keys stored on a YubiKey. It seems to me that my YubiKey setup (done following https://github.com/drduh/YubiKey-Guide ) is substantially better in almost every respect than the state-provided smartcard. I intend to…
    comment by jwr · 2018-09-18 · in GnuPG can now be used to perform notarial acts in the State of Washington
  50. I'd suggest following the excellent guide at https://github.com/drduh/YubiKey-Guide and using one of your GPG subkeys (kept on a hardware device like a YubiKey) for SSH authentication.
    comment by jwr · 2018-08-03 · in The default OpenSSH key encryption is worse than plaintext