Ok, the idea in general isn't good because most people won't use a good password and also because now there's a single point of failure if someone sees your password.
However, it might be okay if one can provide their own hashing function. Like a JS function that takes the domain and secret key as parameters.
However, it might be okay if one can provide their own hashing function. Like a JS function that takes the domain and secret key as parameters.