better-auth-security-best-practices

What problem does it solve?

Better Auth lacks consolidated guidance for cross-cutting security concerns, so this skill provides a cohesive set of best practices that span the entire stack, from rate limiting to auditing, across all plugins.

Core Features & Use Cases

• Comprehensive guidance on rate limiting, CSRF protection, session security, trusted origins, secret management, OAuth security, IP tracking, and security auditing.
• Use when deploying or auditing Better Auth implementations to ensure consistent security controls across all components.
• Real-world scenario: implement a secure authentication flow across multiple services with centralized secret management and monitoring.

Quick Start

Outline a secure deployment plan for a new Better Auth integration that enforces strong secrets, robust session handling, and audit logging.