Using Your YubiKey as a Smart Card for Secure Key Storage

In today's digital landscape, security is more crucial than ever. One way to enhance your security is by using a smart card like the YubiKey. In this article, we'll explore how you can use your YubiKey to store GPG encryption, signing, and authentication keys, as well as discuss its compatibility with OpenSSH and OpenPGP.

YubiKey Compatibility

In May 2021, Yubico released a press release and blog post announcing support for resident SSH keys on their Yubikeys, including the blue 'security key 5 NFC' model. This feature is compatible with OpenSSH 8.2 or later. For more information, you can refer to their official blog post.

Compatible YubiKey Models

Not all YubiKeys are created equal when it comes to compatibility. A list of YubiKeys that support OpenPGP is available for your reference. However, it's important to note that NEO models are limited to 2048-bit RSA keys.

Using Your YubiKey with GPG and SSH

Your YubiKey is a powerful tool that can simplify the process of accessing and managing your encryption, signing, and authentication keys. Instead of having to remember and enter passphrases to unlock your SSH/GPG keys, your YubiKey requires only a physical touch after being unlocked with a PIN.

Security Considerations

When using your YubiKey for secure key storage, it's essential to keep in mind the security implications of not changing your default PINs. If you followed this guide before January 2021, your GPG PIN and Admin PIN may still be set to their default values (12345678 respectively). To change your PINs, please refer to our Change PIN section.

Additional Tips and Resources

For those looking for a password manager that integrates seamlessly with their YubiKey, drduh/Purse is an excellent option. This password manager uses GPG and YubiKey to securely store and read credentials, providing an additional layer of security for your sensitive information.

In conclusion, using your YubiKey as a smart card for storing GPG encryption, signing, and authentication keys is a great way to enhance your online security. With its compatibility with OpenSSH and OpenPGP, you can enjoy the benefits of secure key storage without compromising on convenience.