email-and-password-best-practices

Configure email verification and password reset workflows for Better Auth.

Updated Jan 17, 2026
One-click install
npx skills add https://github.com/lDuang/mcp-skill-registry --skill email-and-password-best-practices-lduang
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: email-and-password-best-practices
Source: https://github.com/lDuang/mcp-skill-registry/tree/main/skill/emailAndPassword
Command: npx skills add https://github.com/lDuang/mcp-skill-registry --skill email-and-password-best-practices-lduang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Configure email verification, implement password reset flows, set password policies, and customise hashing algorithms for Better Auth.

Core Features & Use Cases

  • Email verification to ensure valid user addresses before sign-in.
  • Password reset flows with secure token handling and expiry.
  • Password policy customization and hashing algorithm options for security hardening.
  • Use Case: When onboarding new users, automatically enforce verification and password policies.

Quick Start

Enable email/password, configure verification emails, and add password reset to secure user accounts in your app.

Frequently Asked Questions about email-and-password-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure email verification workflows for Better Auth?

To configure email verification for Better Auth, you set up the sendVerificationEmail function to ensure user addresses are validated before sign-in. This process secures onboarding by automatically enforcing verification policies.

What is the best way to implement password reset flows with secure tokens?

Implementing password reset flows requires configuring the sendResetPassword function using Better Auth. This mechanism handles secure token generation and expiry to safely manage credential recovery.

How do I customize password policies and hashing algorithms for user sign-in?

You customize password policies and hashing algorithms by defining hash and verify functions within Better Auth. This security hardening enforces specific credential requirements during user sign-in.

Does Better Auth support optional session revocation during credential management?

Yes, Better Auth supports optional session revocation during credential management. You can configure this alongside password reset workflows to immediately invalidate active user sessions.

Can I apply these authentication security policies to mobile apps?

Yes, you can apply these authentication security policies to mobile apps. Better Auth supports signup, sign-in, and credential management scenarios across diverse web and mobile environments.