skills.rest
gigun-dev
gigun-devCOMMUNITY
Explore all skills by this author →
𝕏@gigun_devGitHub

email-and-password-best-practices

Configures email and password authentication with customizable policies and Argon2id hashing.

Updated Mar 4, 2026
Search Tags:#security#authentication#user management#hashing#password reset#email verification
One-click install
npx skills add https://github.com/gigun-dev/hono-caldav --skill email-and-password-best-practices-gigun-dev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: email-and-password-best-practices
Source: https://github.com/gigun-dev/hono-caldav/tree/main/.claude/skills/better-auth/emailAndPassword
Command: npx skills add https://github.com/gigun-dev/hono-caldav --skill email-and-password-best-practices-gigun-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you configure robust and secure email and password authentication for your application, covering essential aspects like verification, password resets, and security policies.

Core Features & Use Cases

  • Email Verification: Ensure users have valid email addresses.
  • Password Reset Flows: Implement secure password recovery mechanisms.
  • Password Policies: Enforce strong password requirements.
  • Custom Hashing: Integrate custom hashing algorithms for enhanced security.
  • Use Case: Setting up a new user registration system where new users must verify their email before they can log in, and providing a seamless password reset flow for existing users.

Quick Start

Configure email verification by enabling emailAndPassword: { enabled: true } and setting up emailVerification.sendVerificationEmail.

Frequently Asked Questions about email-and-password-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up secure email and password authentication for user registration?▼

You can enforce strong password security by configuring customizable password policies. This ensures users create robust credentials during registration and helps maintain secure user management.

How does the password reset flow work for existing users?▼

The password reset flow provides a secure password recovery mechanism for existing users. It allows you to implement seamless credential recovery so users can safely regain access to their accounts.

Can I use custom hashing algorithms like Argon2id for password security?▼

Yes, you can integrate custom hashing algorithms like Argon2id for enhanced password security. This supports advanced credential management by allowing you to specify your preferred hashing method.

How do I send verification emails in the background during user sign-up?▼

You can send verification emails in the background by setting up the sendVerificationEmail function within emailVerification. This ensures valid email addresses without blocking the user sign-in process.

What is the best way to require email verification before a user can log in?▼

The best way to require email verification is to enable the emailAndPassword configuration and implement the sendVerificationEmail flow. This ensures new users must verify their email addresses before they can successfully log in.

Related Skills

Explore More Software Engineering Skills→
zeis974zeis974

better-auth-best-practices

Configure Better Auth server and client with database adapters and plugins.

Community
Advanced
wangzeping114wangzeping114

epic-1-auth

Authenticate users with JWT tokens and role-based permissions.

Community
Advanced
PrasadTelasulaPrasadTelasula

email-integration

Send password reset and notification emails via FastAPI-Mail with SMTP and Jinja2 templates.

Community
Intermediate
ChwistopheChwistophe

rails-37-style-backend-authentication

Implement passwordless authentication in Rails with magic links and custom sessions.

Community
Advanced