> ... generate the private key off-device and store it somewhere securely. Doesn't even have to stored securely if it is protected with a strong passphrase. Yo

> ... generate the private key off-device and store it somewhere securely. Doesn't even have to stored securely if it is protected with a strong passphrase. You can keep it anywhere. ... and with contemporary versions of GPG that might only have to be 4 diceware words. For PGP stuff, the advantage of something like a Yubikey is that the unencrypted private key is never exposed to a possibly insecure end device. The actual cryptography is done on the Yubikey. This is a somewhat different situation than with other uses where the Yubikey only protects the secret information.