diff --git a/source/resources/apps/yubikey/README.md b/source/resources/apps/yubikey/README.md
new file mode 100644
index 0000000..382b898
--- /dev/null
+++ b/source/resources/apps/yubikey/README.md
@@ -0,0 +1,16 @@
+sudo yubikey-personalization-gui
+Use:
+- HMAC-SHA1
+- Configuration slot 1
+- Require user input (button press)
+- Yubikey unprotected (keep it that way)
+- Click <Generate>
+Set it to use challenge response (no password):
+sudo su -
+#ykpersonalize -1 -ochal-resp -ochal-hmac -ohmac-lt64 -oserial-api-visible
+mkdir ~/.yubico
+ykpamcfg -1 -v
+mv .yubico/ /home/forksand/
+chown -R forksand:forksand /home/forksand/.yubico/
+vim /etc/pam.d/common-auth
+