Using a 'master key' like in the DrDuh guide does avoid moving the private key around while also allowing for using the same key on multiple devices. The DrDuh

Using a 'master key' like in the DrDuh guide does avoid moving the private key around while also allowing for using the same key on multiple devices. The DrDuh guide suggests generating the key offline (e.g. a live iso), and having a backup of that private key material somewhere. In DrDuh's guide, the 'master' private key is never accessible on an online machine, only the private subkeys. An advantage with YubiKeys is that the private key material can't be re-accessed, so putting the 3 private subkeys on the YubiKey is even nicer. I'd found it hard to visualise, so came up with these diagrams: https://rgoulter.com/blog/posts/programming/2022-06-10-a-visual-explanation-of-gpg-subkeys.html https://rgoulter.com/blog/posts/programming/2022-06-10-a-vis...