18
votes
Accepted
Is this a secure approach to store a master password?
In your scheme, the SHA-256 hash is just sugar, anyone with knowledge of your system (and you should assume an attacker has this knowledge) can recreate it, hence its security is limited by how ...
- 546
6
votes
Is this a secure approach to store a master password?
You are probably looking for using a keyfile, e.g., stored on a USB stick.
Other options are devices like the Yubikey, that can store a password (some can protect it using a fingerprint reader) or PGP-...
- 3,128
1
vote
Is this a secure approach to store a master password?
Unfortunately the answer is yes, keeping in the spirit of your methodology (which from a "pure" security standpoint is terrible, but a good starting point that's better than a sticky note ...
- 51
Only top scored, non community-wiki answers of a minimum length are eligible