You can actually store the key you use for SSH authentication on the Yubikey [1]. The main advantage is that the key never leaves the device, so even if your co

You can actually store the key you use for SSH authentication on the Yubikey [1]. The main advantage is that the key never leaves the device, so even if your computer is compromised, your key is still safe. Same thing goes for anything else involving GPG keys - email, signing git commits or tags, software releases, etc. I don't personally use it for OTP. I do use it for services that support U2F (which is different from OTP, and has the main advantage of being immune to phishing). [1]: https://developers.yubico.com/PGP/SSH_authentication/ https://developers.yubico.com/PGP/SSH_authentication/