Security is hard. I spotted two *major* weaknesses in a cursory glance.

• No salting is employed. If the same password is used twice, your security could be weakened.

• A low entropy password will likely be supplied. Often, the human-readable password protects the high-entropy randomly-generated password that will actually be used.