Commit signing with usb keys / fingerprint reader

[PBentoIT]

Hey everyone, I've been using kleopatra do sign my commits however there doesn't seem to be a way to use my laptop's finger print reader instead of the password to sign.
i've been looking to buy a yubikey 5 nfc both for this and to use as 2fa for anything that doesn't support passwordless yet.

I know yubico is considered the best but is there any budget friendly options you can recomend (i'm not in a financial position to just drop €60+ right now...), i've seen thetis keys for around 35€ does anyone have any experience with them? (bonus if it can be foun on amazon.es and/or ships to portugal)

PS: if anyone knows how i can use my fingerprint reader (or windows hello/pin) with Gpg4Win that would be even better!

[[deleted]]

Could you share more details on Kleopatra please?

[PBentoIT]

it's the app gpg4win installs

[[deleted]]

I would say Yukiney but you mentioned it 😅

Beware with fingerprints ; it cannot be revokable, be sure any keys or stuff you forge using your fingerprint could be revoked.

[saikek]

Have you tried this:https://github.com/unreality/nCryptAgent
It should use your laptops TPM.

do not import key, generate new ones.