email-and-password-best-practices

To set up email verification and password reset flows, enable email and password authentication in your application settings and run the `npx @better-auth/cli@latest migrate` command to configure secure user sign-ups and logins.

The best way to enforce a password policy for user authentication is to use this Skill to apply built-in rules for enhanced security, ensuring strong credentials during user sign-up and secure credential recovery.

Yes, you need the Better Auth library to configure secure user login systems, as this Skill requires the `@better-auth/cli` dependency for its core authentication logic, email verification, and password reset functionality.

Yes, you can use custom hashing algorithms for secure password storage, as the authentication setup supports custom hashing configurations to protect user credentials alongside standard email and password verification.

Email verification matters for secure user authentication because it validates user email addresses, ensuring a strong foundation for secure user sign-ups and preventing unauthorized access during the login process.