This guide will allow you to use your OpenPGP enabled Yubikey to securely send and recieve PGP encrypted files, sign code and messages and authenticate yourself E.G. When logging in over SSH. In this guide we are going to generate our PGP keys off our Yubikeys and transfer them on, this is so we can have identical coppies of PGP keys on multiple Yubikeys so that if we lose or damage one of them we can use our backup. For the most security concious people you would generate the PGP keys directly on the Yubikeys so that the private PGP keys are never out in the open but this bring complexities of managing different auth, encryption and signing keys. You can mitigate the problem of generating the PGP keys off of the Yubikeys by generating them on an air-gapped system. In this guide we are only going to have 1 backup but you can repeat the backup steps to create as many backup as you like. You can also use the backup steps to restore your PGP keys to a new Yubikey should you damage or lose your main one.
It is w