email-and-password-best-practices

Configure Better Auth email verification and password reset workflows.

Updated Apr 5, 2026

Search Tags:#security #authentication #better-auth #hashing #password-reset #email-verification #password-policy

Ready to run

npx skills add https://github.com/sc30gsw/jikan-log --skill email-and-password-best-practices-sc30gsw

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: email-and-password-best-practices
Source: https://github.com/sc30gsw/jikan-log/tree/main/.agents/skills/email-and-password-best-practices
Command: npx skills add https://github.com/sc30gsw/jikan-log --skill email-and-password-best-practices-sc30gsw

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Developers need to implement reliable email verification, password reset workflows, and secure password hashing for user authentication in their apps. This Skill provides a guided configuration and practical code examples to integrate Better Auth email/password authentication, reducing setup time and improving security.

Core Features & Use Cases

Email verification: verify user emails during signup and prevent unverified access.
Password workflows: support sign-up, sign-in, and password reset flows with customizable token lifetimes.
Password security: flexible hashing options and policy enforcement to meet security requirements.

Quick Start

Enable email/password, configure emailVerification, add password reset, run the migration, and verify flows in your app.

Frequently Asked Questions about email-and-password-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I configure email verification for user sign-up in Better Auth?▼

Email verification in Better Auth is configured by enabling the emailVerification setting within the email/password authentication provider, preventing unverified access during the sign-up workflow.

How do I implement a secure password reset workflow with Better Auth?▼

Password reset workflows are implemented by configuring customizable reset token lifetimes within Better Auth, allowing you to securely manage credential recovery for web or mobile applications.

Can I enforce custom password policies and hashing algorithms in Better Auth?▼

Yes, Better Auth supports flexible password security through configurable policy enforcement and pluggable hashing algorithms, providing sensible defaults that you can adjust to meet specific security requirements.

What is the best way to set up credential authentication for web apps using Better Auth?▼

The best way to set up credential authentication is by enabling email/password configurations for sign-up and sign-in flows, then running the required database migration to apply the schema changes.

Does Better Auth support email and password authentication for mobile apps?▼

Yes, Better Auth email and password authentication workflows, including sign-up, sign-in, and password reset, are fully supported for both web and mobile app environments.