authn

Analyze authentication designs for password hashing, MFA, and session management.

Updated Jun 5, 2026
One-click install
npx skills add https://github.com/hung-phan/system-skills --skill authn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: authn
Source: https://github.com/hung-phan/system-skills/tree/main/skills/system-review/references/security/authn
Command: npx skills add https://github.com/hung-phan/system-skills --skill authn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenges of user authentication, ensuring secure verification of user identity while protecting against common vulnerabilities and threats.

Core Features & Use Cases

  • Password Hashing: Offers best practices for password hashing with algorithms like Argon2id and scrypt.
  • Multi-Factor Authentication: Provides guidance on implementing MFA with TOTP, push notifications, and WebAuthn.
  • Session and Token Management: Covers server-side sessions and stateless tokens (JWTs) with security considerations.
  • Credential Stuffing Defense: Suggests strategies for defending against credential stuffing attacks.
  • Use Case: When designing a new login system, implementing MFA for an existing system, or investigating security breaches related to authentication.

Quick Start

Analyze the authentication design of your application using the authn skill to identify common pitfalls and security considerations.

Frequently Asked Questions about authn

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure password hashing for user authentication?

Implement secure password hashing using algorithms like Argon2id and scrypt to protect user credentials. This Skill provides specific best practices for configuring these mechanisms within your authentication system design.

What is the best way to set up multi-factor authentication with TOTP and WebAuthn?

Set up MFA by integrating time-based one-time passwords, push notifications, and WebAuthn. This Skill outlines specific security considerations and implementation guidance for deploying these multi-factor authentication mechanisms.

How does session and token management work for stateless JWTs?

Session and token management validates user state via server-side sessions or stateless JWTs. This Skill analyzes the distinct security considerations and implementation practices required for each approach within software systems.

How do I defend my login system against credential stuffing attacks?

Defend against credential stuffing by applying targeted security strategies to your login endpoints. This Skill suggests specific defense mechanisms to protect user authentication from automated threat vectors.

Can I analyze my existing application's authentication design for security pitfalls?

Yes, you can analyze your existing application's authentication design to identify common pitfalls and security considerations. This Skill evaluates current practices across password hashing, MFA, and session management.