You can also store static passwords on yubikey which requires no direct hardware access. Using a prefix to protect them a little more