# drduh/YubiKey-Guide

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

Repository: https://github.com/drduh/YubiKey-Guide
Canonical: https://ross.abutalabs.com/products/yubikey-guide
Homepage: https://drduh.github.io/YubiKey-Guide/
Language: HTML
License: MIT
License Family: permissive
Topics: yubikey, gpg, gnupg, ssh, security, gpg-agent, gpg-configuration, smartcard, remote-access, rsa-cryptography, hardening, pgp, guide, guides, privacy, ssh-agent, identity-management, secrets
Last push: 2026-08-23T23:30:05+00:00

## Health v2 (maintenance only)
Score: 77/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 35, longevity 100
- inputs: {"age_days": 3867, "days_push": 10, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 12453, forks 1249 (observed 2026-08-28T04:10:58.944775+00:00)

## What it is
A community-maintained guide for storing GnuPG and SSH credentials on YubiKey hardware tokens, covering key creation, subkey transfer, agent configuration, and hardening. It is documentation rather than software, published as HTML and rendered on GitHub Pages.

## Use cases
- set up SSH authentication with a YubiKey
- store GPG private keys on a hardware token
- create an offline certify key and subkeys
- configure gpg-agent for SSH agent forwarding
- harden a key generation environment
- rotate or renew GPG subkeys
- sign git commits and email with hardware-backed keys

## When to choose
- you own a YubiKey with OpenPGP support and want hardware-backed GPG/SSH keys
- you need a step-by-step, security-hardened key setup walkthrough
- you want guidance on backups, agent forwarding, and key rotation

## When to avoid
- you use a YubiKey Security Key or Bio model without OpenPGP support
- you need software or tooling rather than a written guide
- you use non-Yubico smartcards with different setup procedures

## Facets
- artifact type: learning-resource
- maturity: stable
- function: security, cryptography, documentation
- domain: security, privacy, developer-tools, documentation
- platform: windows, cross-platform
- tags: yubikey, gnupg, ssh, smartcard, hardware-security, pgp, guide, hardening, secrets-management, linux, macos

## Member repositories
- drduh/YubiKey-Guide (main) score 77

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:10:58.944775+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:14:03.163566+00:00, confidence not recorded.
  - readme: https://github.com/drduh/YubiKey-Guide (fetched 2026-08-28T04:10:58.944775+00:00, sha 4bffc606b6ed)
  - homepage: https://drduh.github.io/YubiKey-Guide/ (fetched 2026-08-29T08:10:48.406398+00:00, sha 6d39178409f8)
- Data as of 2026-08-30T08:39:29.467469+00:00.