Apologies if this has been addressed.
So I was thinking of a way for people to store a copy of their STRONG master password in electronic form on their computer (for forgetful people that want to be able to cut and paste) and thought that URLs would be a fairly easy way to do that.
Obviously www.google.com is not very strong but -
is not likely to be brute forced anytime soon (btw is there a maximum master password length?), especially if you add a simple salt i.e. URL + Dictionary Word. Furthermore, something like:
would be pretty easy to remember.
The beauty to me is that you probably have hundreds if not thousands of URLs stored on your computer, in your email, and in your browser bookmarks.
One of these passwords would be extremely difficult to crack from brute force perspective, and it would take an incredibly dedicated hacker with access to your computer and email to try every URL on your email/computer, especially if your using a simple salt with the URL.
Furthermore, having a url in an email or bookmark, isn't obviously a password where as most people quickly recognize "Obv!ous1234" as one.
I suppose one could argue that this is really just a security through obscurity scheme, but only as it relates to where you are keeping your backup of your master password.
Any thoughts? Is this a completely asinine idea?