After months of procrastination, I finally moved to using #yubikey stored #privateSSHkeys . This was a short and sweet guide that helped get things working within 20 minutes or less:
https://xeiaso.net/blog/yubikey-ssh-key-storage/
TL;DR version:
a. Install yubikey-manager
b. Generate a key to be stored on yubikey:
ssh-keygen -t ed25519-sk -O resident
c. list public key: ssh-add -L
d. add to ssh-agent: ssh-add -K
Works on any machine you plug yubikey into. Requires touch on use
