I keep my ssh keys locked with passwords in a KeePassXC, that are in turn locked with a YubiKey with fingerprint as a 2FA – pretty decent, I’d say 🙂 Once KeePassXC is unlocked, it automatically feeds all the keys to the ssh-agent. That means that when you try to use ssh-agent (and you most probably want to) to connect …