Verified:GitHub

email-and-password-best-practices

Configure email/password authentication with verification, resets, and custom hashing for Better Auth.

Updated Aug 23, 2026

Search Tags:#hashing #password-reset #token-management #email-verification #password-policy #secure-auth

One-click install

npx skills add https://github.com/SeanChenR/maestro-agent --skill email-and-password-best-practices-seanchenr

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: email-and-password-best-practices
Source: https://github.com/SeanChenR/maestro-agent/tree/main/.agents/skills/email-and-password-best-practices
Command: npx skills add https://github.com/SeanChenR/maestro-agent --skill email-and-password-best-practices-seanchenr

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Configure email verification, password reset flows, set password policies, and customise hashing algorithms for Better Auth email/password authentication. Use when users need to set up login, sign-in, sign-up, credential authentication, or password security with Better Auth.

Core Features & Use Cases

Enable email verification to ensure users verify their email addresses before signing in.
Password reset flows to allow secure recovery and token expiry management.
Password policy customization to enforce min/max length and hashing strategies for security.
Use Case: Example scenario where a new user signs up, verification email is sent, and password policy is enforced on registration.

Quick Start

Enable email/password by turning on emailAndPassword, configure emailVerification and sendResetPassword, and provide custom hash/verify if you need custom hashing.

Frequently Asked Questions about email-and-password-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

Does Better Auth support enforcing password policies during user registration?▼

Better Auth supports password policy customization to enforce minimum and maximum length constraints. This ensures strong password security directly during the sign-up workflow.

What is the best way to implement a secure password reset flow in a web backend?▼

Secure password reset flows are implemented by configuring sendResetPassword with token management and expiry. This allows secure credential recovery and token expiry management for web or API backends.

Can I use a custom hashing strategy for credential authentication instead of the default?▼

Custom hashing strategies are supported by supplying custom hash and verify functions. This allows you to integrate your preferred hashing algorithms for secure authentication.

Does Better Auth support enforcing password policies during user registration?▼

Better Auth supports password policy customization to enforce minimum and maximum length constraints. This ensures strong password security directly during the sign-up workflow.