How to Setup Your Yubikey with Your GPG Subkeys

This is a guide to using YubiKey as a SmartCard for storing GPG encryption, signing and authentication keys, which can also be used for SSH. Many of the principles in this document are applicable to other smart card devices.

Keys stored on YubiKey are non-exportable (as opposed to file-based keys that are stored on disk) and are convenient for everyday use. Instead of having to remember and enter passphrases to unlock SSH/GPG keys, YubiKey needs only a physical touch after being unlocked with a PIN code. All signing and encryption operations happen on the card, rather than in OS memory.

I forgot to mention how to set up the touch feature of the yubikey, here are the commands:
$ ykman openpgp touch aut on
$ ykman openpgp touch sig on
$ ykman openpgp touch enc on

Get Tails:
Get a Chaos Key:
Get at least 1 Yubikey:
Get at least 3 USB sticks.

Check out the GPG series by 402 Payment Required:

Listen to WCN Audio Podcasts:

Follow WCN on Twitter:
Follow Max on Twitter:

Contribute to Max’s Bachelor Thesis on Multi Signature in Lightning Network Payments:

Bitcoin to the Max:
Read Rothbard ~ Use Bitcoin:
Open Source Everything:
Hackers Congress Paralelni Polis 2018:
Baltic Honeybadger 2018:
Nodl Personal Bitcoin Assistant:
Bisq Decentralized Exchange:
ColdCard Wallet:
Purism:
Bitcoin Op Tech Newsletter:
Mises University:
Hayek Summer Workshop:

[chanzh]

you do not have to buy a new gpg if you lose the PIN. it will just get locked with the current GPG key, but you can reset the pin and re-instal a key into it

[sakutube]

can you put up a video showing how to use GnuPG Kleopatra interface ?

[maxmustermann]

Do I need to export every public key sig, auth, crypt, master or does the mostet public key does everything?

[keepthinkinglovemore]

1. Why don't you just encrypt a simple USB stick with your keyring inside ?
2. How can be so sure that vendors of Yubikey haven't crafted this device without any secret back doors?