Your strategy was proposed by joel spolsky some time ago: https://www.joelonsoftware.com/2008/09/11/password-managemen...