Security
Securing Git Commits with GPG and YubiKeys: Best Practices for 2026
A practical, modern guide to signing your git commits with GPG and a YubiKey. Why it matters, where the common advice is overkill, and how to set it up properly.

Hi, I'm Julie
I design & build novel developer experiences
Security
A practical, modern guide to signing your git commits with GPG and a YubiKey. Why it matters, where the common advice is overkill, and how to set it up properly.
How a burnt-out AI skeptic became a believer. Comparing Claude Code and GitHub Copilot, why the collaborative agent experience — not the underlying model — made me 2x faster and brought back the joy of coding.
Security
Since I worked as an architect in the compliant financial industry, I have been signing my git commits so that people cannot impersonate me in source code. I have always defaulted to a single GPG personal key that I could also use for both personal and work. But suddenly I needed to juggle two keys.
Architect and full stack engineer with 25+ years experience
I share my expertise at conferences around the world.

DevOps.js Conference, Virtual | March 29 2021
One app is easy to automate; add components, infrastructure and teams and you're lost. How many pipelines and repos do you need? Criteria to slice your pipelines without spaghettifying them.

NodeConf EU, Kilkenny, Ireland | November 10-14 2019
Monitoring tools drown you in information. Building a microservice architecture visualization with d3.js and live monitoring, then watching your architecture dance in real time.

EnterJS Conference, Darmstadt, Germany | June 21 2018
JavaScript's quirks make CI/CD tricky. What do you compile, when, and where? A look at full-stack JS pipelines and the common challenges. We'll laugh and cry.
Companies I've worked for
Designer, UI/UX
Enterprise Architect

Engineer, Azure CXP