yubikey-agent

yubikey-agent is a seamless ssh-agent for YubiKeys. (by FiloSottile)
Add to my DEV experience Yubikey ssh-agent Cryptography piv Smartcard SSH
Source Code
filippo.io
yubikey-agent Reviews
Suggest alternative
Edit details
Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured

Yubikey-agent Alternatives

Similar projects and alternatives to yubikey-agent

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better yubikey-agent alternative or higher similarity.
Suggest an alternative to yubikey-agent

yubikey-agent reviews and mentions

Posts with mentions or reviews of yubikey-agent. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-07-29.
  • Show HN: SSH-tpm-agent – SSH agent for TPMs
    5 projects | news.ycombinator.com | 29 Jul 2023
    This is a great idea. I now exclusively use SSH keys on hardware security modules of some kind. I use "Secretive", a mac app that does the same, plus a yubikey using yubikey-agent (https://github.com/FiloSottile/yubikey-agent; there are too many complicated ways to use SSH keys with a yubikey this is one of the friendliest ones). Depending on the security and frequency of which I access the service impacts whether I need presence confirmation or use secretive versus the yubikey.

    I would be remiss to mention there are existing SSH TPM projects, not sure how this one differentiates. It seems to at least have the user experience pretty simple, similar to yubikey-agent (and secretive), and unlike some of the existing solutions which have quite a few extra steps:

  • Secretive: Store SSH Keys in the Secure Enclave
    4 projects | news.ycombinator.com | 9 Mar 2023
    Also check out https://github.com/FiloSottile/yubikey-agent which simplifies the setup quite a bit.
  • Yubikey ssh keys with Ansible, wants to be touched constantly
    1 project | /r/yubikey | 10 Feb 2023
    I'm using it on nixOS and macOS, via Nix Packages and Homebrew respectively. It's this - https://github.com/FiloSottile/yubikey-agent I'm realizing from this thread that it's not an official package. I'll go closer to the source with ykman. Thanks!
  • Is it possible to use AGE with a Ledger hardware device?
    1 project | /r/crypto | 26 Oct 2022
    I think the Ledger Manager only interfaces with the GPG and SSH agents, neither of which age take advantage of. But age does have support for Yubikeys (see https://github.com/FiloSottile/yubikey-agent). If you can interface with the Ledger hardware device as a Yubikey, this might work. I don't have experience here, just a thought.
  • Cloudflare Hardware Keys (Yubico Partnership)
    1 project | news.ycombinator.com | 1 Oct 2022
    You can use PIV for SSH just fine.

    It's not OpenSSH's weird FIDO mode, but I don't like the FIDO mode anyway because it requires storing a file on the computer.

    https://github.com/FiloSottile/yubikey-agent

  • Am I the only one who's nervous when SSH-agent forwarding?
    2 projects | /r/sysadmin | 23 Sep 2022
    I have the same concern. I modified Pageant (Windows agent) so that it prompts me before signing anything which helps ease my mind, I only approve when I know I'm connecting to a new server. There are also options like requiring a Yubikey too (https://github.com/FiloSottile/yubikey-agent)
  • Failed to fetch key with ECDSA keys via libykcs11.dll
    2 projects | /r/yubikey | 23 Jun 2022
    Aging MBP, Intel based, Monterey 12.3.1 uname -v Darwin Kernel Version 21.4.0: Fri Mar 18 00:45:05 PDT 2022; root:xnu-8020.101.4~15/RELEASE_X86_64 brew info yubikey-agent yubikey-agent: stable 0.1.5 (bottled), HEAD Seamless ssh-agent for YubiKeys and other PIV tokens https://filippo.io/yubikey-agent /usr/local/Cellar/yubikey-agent/0.1.5 (7 files, 4.8MB) * ...
  • How to Store an SSH Key on a Yubikey
    13 projects | news.ycombinator.com | 30 May 2022
    Unless I've missed something, SSH keys stored on Yubikeys are still hampered because you aren't allowed to a touch policy of "touch never".

    Imagine needing to touch the Yubikey with each "git pull" or using Ansible to operate over SSH on a dozen servers in parallel, and needing to touch the Yubikey once for each server.

    The feature request I'm tracking is here: https://github.com/FiloSottile/yubikey-agent/issues/95

    The proposed feature would allow setting a touch policy for the SSH key.

  • FreeBSD SSH Hardening
    9 projects | news.ycombinator.com | 15 Sep 2021
  • Yubikey PIV encrypted messaging system
    4 projects | /r/crypto | 27 Aug 2021
    If you can do ssh, you can sign messages: https://github.com/FiloSottile/yubikey-agent
  • A note from our sponsor - InfluxDB
    www.influxdata.com | 10 May 2024
    Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Stats

Basic yubikey-agent repo stats
15
2,575
0.0
5 months ago

FiloSottile/yubikey-agent is an open source project licensed under BSD 3-clause "New" or "Revised" License which is an OSI approved license.

The primary programming language of yubikey-agent is Go.

Popular Comparisons

  1. yubikey-agent VS wsl-ssh-agent
  2. yubikey-agent VS aws-vault
  3. yubikey-agent VS authelia
  4. yubikey-agent VS age-plugin-yubikey
  5. yubikey-agent VS win-gpg-agent
  6. yubikey-agent VS ssh-audit
  7. yubikey-agent VS piv-agent
  8. yubikey-agent VS WinCryptSSHAgent
  9. yubikey-agent VS mfsbsd
  10. yubikey-agent VS seeding-webauthn

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com