2022 Developer Survey is open! Take survey.
18 votes
Accepted

Is this a secure approach to store a master password?

In your scheme, the SHA-256 hash is just sugar, anyone with knowledge of your system (and you should assume an attacker has this knowledge) can recreate it, hence its security is limited by how ...
user avatar
6 votes

Is this a secure approach to store a master password?

You are probably looking for using a keyfile, e.g., stored on a USB stick. Other options are devices like the Yubikey, that can store a password (some can protect it using a fingerprint reader) or PGP-...
user avatar
  • 3,128
1 vote

Is this a secure approach to store a master password?

Unfortunately the answer is yes, keeping in the spirit of your methodology (which from a "pure" security standpoint is terrible, but a good starting point that's better than a sticky note ...
user avatar
  • 51

Only top scored, non community-wiki answers of a minimum length are eligible