[citruspi]

I use a combination of a Yubikey and GnuPG. My GnuPG private key has a password which consists of two parts:

1) A long secure password stored on my Yubikey 2) A shorter password (stored mentally)

Passwords are saved into individual files and encrypted with my private key using pass[0].

[0] pass: http://www.passwordstore.org/