rcmnd

YubiKeyHardware

by Yubico

Who uses, recommends or left YubiKey, in their own words: each a verbatim quote with a link to where it was said.

3 people

Software engineer and engineering leader at Canonical, working on Ubuntu; writes about his homelab and tooling at jnsgr.uk.
loved

One of my favourite things about the Yubikey is their ability to store TOTP codes.

His /uses page, covering hardware, homelab and the software he runs day to day.

2026-08-27·jnsgr.uk ↗

AI researcher; founder of Eureka Labs, previously director of AI at Tesla and a founding member of OpenAI.
recommended

basically I strongly recommend the use of 2-3 YubiKeys to dramatically strengthen your digital security.

His guide to basic digital hygiene: the privacy and security tools he uses day to day.

2025-03-17·karpathy.bearblog.dev ↗

Cryptography engineer; maintains Go's cryptography libraries as a full-time open-source maintainer.
uses

Secrets are encrypted to two keys generated on two YubiKeys with the default settings of age-plugin-yubikey. These keys can’t be extracted or cracked by any attacker, regardless of how compromised my laptop or vault gets.

Blog post describing his personal password and secret management setup

2022-12-28·words.filippo.io ↗

Every entry is a verbatim quote and a link to the public post it came from. Nothing is paraphrased. If it is not on record somewhere public, it is not here.

The verdict is what they actually said: loved and liked are explicit; recommended means they told others to get it; uses means they only say they use it; read is a book on their public shelf with no verdict; mixed and disliked are kept too.

A dashed affiliate link, sponsored or their own label means the post disclosed a relationship. It is shown, never hidden.

The shading behind a date shows how dated a recommendation is for its kind of thing.

The shading behind a date shows how dated a recommendation is, for its kind of thing. Fully green is recent. It drains a quarter at a time as the post gets older, and is empty once it reads as dated.

What counts as old depends on the thing. A laptop praised four years ago has been replaced twice; a book loved twenty years ago is probably still loved. The shading is gone after about:

Stripes mean the post carries no date and the date shown is an estimate. No date at all, no shading.