email-and-password-best-practices

Configure Better Auth email and password authentication with verification and reset flows.

Updated Mar 11, 2026
One-click install
npx skills add https://github.com/sckroll/nextjs-mariadb-sample --skill email-and-password-best-practices-sckroll
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: email-and-password-best-practices
Source: https://github.com/sckroll/nextjs-mariadb-sample/tree/main/.agents/skills/email-and-password-best-practices
Command: npx skills add https://github.com/sckroll/nextjs-mariadb-sample --skill email-and-password-best-practices-sckroll

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the complexities of securely implementing user authentication, including email verification, password reset flows, and robust password policies, ensuring a safe and user-friendly login experience.

Core Features & Use Cases

  • Email Verification: Configure automatic sending of verification emails upon sign-up.
  • Password Reset: Implement secure password reset flows with configurable token expiration.
  • Password Policies: Define minimum and maximum password lengths to enhance security.
  • Custom Hashing: Support for custom password hashing algorithms like Argon2id.
  • Use Case: When setting up a new web application, use this Skill to ensure users can sign up securely, verify their email addresses, and reset their passwords if forgotten, all while enforcing strong password requirements.

Quick Start

Configure email verification by setting the sendVerificationEmail option in your better-auth setup.

Frequently Asked Questions about email-and-password-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure email verification for user sign-up in Better Auth?

Configure email verification by setting the `sendVerificationEmail` option in your Better Auth setup to automatically dispatch verification emails upon user sign-up.

What's the best way to implement a secure password reset flow with token expiration?

Implement a secure password reset flow by configuring token expiration settings within your authentication setup, ensuring tokens are invalid after a defined period.

Can I use custom hashing algorithms like Argon2id for password security?

Yes, you can use custom hashing algorithms like Argon2id for password security to safely store user credentials and protect against brute-force attacks.

How do I enforce password policies like minimum length for user authentication?

Enforce password policies by defining minimum and maximum password lengths in your authentication configuration to enhance overall credential security.

Does Better Auth support customizing token security for password resets?

Yes, Better Auth supports customizing token security for password resets, allowing you to define token expiration and secure credential management flows.