awesome Yubikey resources, open source projects, tools and tutorials

• Configuration Guides
• Tools
• Standards / Protocols
• Libraries / Clients

List of guides / documents help setting up Yubikey.

• YubiKey-Guide - Guide to using YubiKey for GPG and SSH
• YubiKey - ArchWiki
• YubiKey at Datadog
• secure-mac-guide - How to secure your Macbook with Yubikey and use it for SSH auth.
• ubuntu-yubikey-setup - A guide for setting up Yubikey support on an Ubuntu 18.04-based distribution (such as elementaryOS 5.0 "Juno")

List of tools to use with Yubikey.

• Yubico Authenticator(GitHub Repo) - Cross-platform application for generating Open Authentication (OATH) time-based TOTP and event-based HOTP one-time password codes, with the help of a YubiKey that protects the shared secrets.
• YubiKey Manager - Python library and command line tool for configuring a YubiKey.

• awsu - Enhanced account switching for AWS, supports Yubikey as MFA source.
• Purse - GPG asymmetric (YubiKey) password manager
• rage - A simple, secure and modern encryption tool with small explicit keys, no config options, and UNIX-style composability.
• yubikey-agent - yubikey-agent is a seamless ssh-agent for YubiKeys.
• yubikey-luks - Two factor authentication for harddisk encryption.
• yubikey-touch-detector - A tool to detect when your YubiKey is waiting for a touch (to send notification or display a visual indicator on the screen).
• yubico-pam - The Yubico PAM module provides an easy way to integrate the YubiKey into your existing user authentication infrastructure. PAM is used by GNU/Linux, Solaris and Mac OS X for user authentication, and by other specialized applications such as NCSA MyProxy.
• yubikeylockd - Simple daemon for locking and unlocking macOS with Yubikey
• yubikey-provisioning-scripts - A set of scripts based on drduh's Yubikey guide to automatically provision your yubikey. Supports Linux and MacOS.

List of standards / protocols Yubikey implements.

• CCID: Chip Card Interface Device
• FIDO2 / FIDO UAF / FIDO U2F
• HOTP: HMAC-Based One-Time Password Algorithm
• OATH
• OpenPGP
• PIV: Personal Identity Verification
• TOTP: Time-Based One-Time Password Algorithm
• WebAuthn

• python-yubico-client - Python library for validating Yubico Yubikey One Time Passwords (OTPs) based on the validation protocol version 2.0.
• yubikey.rs - Pure Rust YubiKey host-side driver for PIV-based RSA/ECC key storage + signing/encryption support.
• yubico-rs - Yubikey client API library, Challenge-Response & Configuration
• yubigo - Yubigo is a Yubikey client API library that provides an easy way to integrate the Yubico Yubikey into your existing Go-based user authentication infrastructure.

Contributions welcome! Read the contribution guidelines first.

To the extent possible under law, nozaq has waived all copyright and related or neighboring rights to this work.