exabrial

I’ll definitely give this a spin!

My go to right now is using a gpg key with ssh subkey. The key is actually on YubiKey. Similar security properties but portable.

computerfriend

If you're already using a Yubikey, you can use FIDO2-based SSH keys which work natively with ssh-agent.

zoidb
Also check out https://github.com/FiloSottile/yubikey-agent which simplifies the setup quite a bit.