email-and-password-best-practices

Configure email/password authentication with verification and password reset workflows in Better Auth.

1|Updated Mar 12, 2026
One-click install
npx skills add https://github.com/mahou-labs/shiru --skill email-and-password-best-practices-mahou-labs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: email-and-password-best-practices
Source: https://github.com/mahou-labs/shiru/tree/main/.agents/skills/email-and-password-best-practices
Command: npx skills add https://github.com/mahou-labs/shiru --skill email-and-password-best-practices-mahou-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Configuring and securing email/password authentication flows with verification, password resets, and customizable hashing to protect user credentials.

Core Features & Use Cases

  • Email verification workflow to ensure valid addresses
  • Password reset flow to recover access
  • Customizable hashing and migration guidance for existing users

Quick Start

Enable email/password authentication and configure verification, reset, and hashing settings to secure user sign-in flows.

Frequently Asked Questions about email-and-password-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure email verification and password reset workflows in Better Auth?

To configure email verification and password reset workflows in Better Auth, enable email/password authentication and customize verification handlers, reset token expiries, and email sending logic to secure user sign-up and recovery flows.

What is the best way to secure email and password authentication for user sign-in?

Securing email and password authentication requires implementing customizable password hashing, enforcing email verification to validate addresses, and configuring dedicated password reset token expiries to protect credential-based login scenarios.

Does Better Auth support password hashing migration for existing users?

Yes, Better Auth supports password hashing migration by allowing you to configure customizable hashing settings, ensuring existing users can transition seamlessly to updated credential security standards during authentication.

How do I handle password reset token expiries for credential-based login?

Handling password reset token expiries involves configuring dedicated reset token lifespans within your authentication setup, ensuring recovery flows remain secure and time-bound for users requesting access recovery.

Why do I need email verification handlers in my authentication flow?

Email verification handlers are needed to ensure valid addresses during sign-up, preventing fake account creation and enabling secure recovery workflows before users can fully access credential-based login features.