It's pretty much a combination the following: - https://keepassxc.org/docs/#faq-ssh-agent-how https://keepassxc.org/docs/#faq-ssh-agent-how - https://develope

It's pretty much a combination the following: - https://keepassxc.org/docs/#faq-ssh-agent-how https://keepassxc.org/docs/#faq-ssh-agent-how - https://developers.yubico.com/SSH/Securing_SSH_with_FIDO2.html https://developers.yubico.com/SSH/Securing_SSH_with_FIDO2.ht... You could probably also put the SSH key itself as a resident key on the YubiKey. But personally I like the fact the key and 2FA aren't on the same device (and the fact you can only get my key when you know the KeepassXC master password).