Whenever I check integrity of a file using md5sum, I get a string of alphanumeric characters to compare and verify if it was downloaded correctly.
Couldn't the concatenation of several of those strings be used as password? This would allow to 'store' the password in the clear, as long as I remember exactly which files produce said md5 strings.
I know it's as impractical as it gets, but I'm curious about possible security hazards and advantages, if any.
Advantages I can think of:
- Capability to recover your password, even if your hard drives and back ups get nuked.
- Being unable to input your password directly if interrogated. Although you could always point to the files, so not really any safeguard here.
Disadvantages I can see without barely any knowledge of information security:
- Extremely impractical when compared with a password manager.
If the files are chosen poorly, or are prone to edit, the password could be lost or difficult to find. e.g. One of the files is a wallpaper from a popular show and it sprawls many edits by its fans.
The password is accessible by anyone with internet connection. The only thing protecting it is the fact that it could be any combination of files with a creation date older than the password itself.
As stated, I know next to nothing about IS. Please, correct any misconception or mistake in this question.