

This will use the YubiKey as your SSH key. I also checked for you which commonly used server distros has which openssh-server version: Operating System Discoverable CredentialĬan be used by someone who finds the YubiKey You have discoverable Credentials and non-discoverable Credentials. I was an idiot so you don't have to be.Īnyway, let's go forward with the 2 types of keys. You can reset the PIN anytime, but then all your U2FA will be reset as well.

If you lose that you are in trouble like me.😏 This can be done with the YubiKey Manager via CLI or GUI. Be sure to create a FIDO2 PIN for the YubiKey. Let's go to the coolest and easiest solution for private use in my opinion: FIDO2 which stands for Fast Identity Online. You certainly can use your YubiKey with PGP and SSH. A lot of folks say that PGP is a major pain in your behind. Honestly, this seems to be very complex as everything with PGP that I came across. I looked briefly into this and watched a few videos. This is more suited to an enterprise where you want to centrally manage all your keys. And not as secure and more suited to a more legacy version of OpenSSH. This will just give you the option to add a second factor with a One Time Password. YubiKeys allow a few different methods to make your ssh login more secure.

Looks like quite a lot! YubiKey SSH Key login methods I was asking myself what else can I do with this key, especially for my servers which I need to connect to via SSH. That was about it what I use my YubiKey 5 NFC for. If you obtain control over my Google account you can reset every password for every service I am registered with.īitwarden stores my actual passwords so pretty important as well. I am using a YubiKey for quite some time now for my most valuable accounts:
