skills.rest
zomeru
zomeruCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

email-and-password-best-practices

Standardize secure email and password authentication in Better Auth configuration.

Updated Oct 12, 2025
Search Tags:#authentication#better-auth#password-reset#token-management#security-best-practices#password-security#email-verification
One-click install
npx skills add https://github.com/zomeru/rezumerai --skill email-and-password-best-practices-zomeru
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: email-and-password-best-practices
Source: https://github.com/zomeru/rezumerai/tree/main/.agents/skills/email-and-password-best-practices
Command: npx skills add https://github.com/zomeru/rezumerai --skill email-and-password-best-practices-zomeru

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides guidance and enforcement rules for implementing secure email and password authentication using Better Auth. It helps teams standardize verification flows, strengthen password handling, and reduce account compromise risk.

Core Features & Use Cases

  • Email verification workflows: guidance on configuring email verification to prevent fake sign-ups and ensure users verify ownership.
  • Password security & reset flows: best practices for password hashing, token expiration, and reset/link workflows.
  • Security guardrails: client-side validation, redirect handling, and anti-abuse considerations for authentication across web and API apps.
  • Use Case: When building an app with email/password auth, apply these rules to deliver safer sign-in experiences and faster incident response.

Quick Start

Enable email verification, configure reset password flows, and enforce password policies using Better Auth in your project.

Frequently Asked Questions about email-and-password-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure email verification in Better Auth?▼

To configure email verification in Better Auth, you enable verification hooks to prevent fake sign-ups and ensure users verify email ownership before accessing the application.

What are the best practices for password reset flows in web apps?▼

Best practices for password reset flows involve enforcing password hashing, setting strict token expiration limits, and implementing safe redirect handling to secure the recovery process.

Does Better Auth support custom password security and hashing requirements?▼

Better Auth supports custom password security by enforcing robust password handling and hashing requirements, allowing you to strengthen password policies across web apps and APIs.

How do I prevent fake sign-ups during email and password authentication?▼

You prevent fake sign-ups during email and password authentication by applying standardized email verification workflows that require users to verify ownership before account activation.

What security guardrails should I apply for authentication across web apps and APIs?▼

Security guardrails for authentication include enforcing client-side validation, implementing safe redirect handling, and applying anti-abuse considerations to protect web apps and APIs.

Related Skills

Explore More Software Engineering Skills→
sqmasepsqmasep

email-and-password-best-practices

Configure Better Auth email verification, password reset, and Argon2id hashing workflows.

Community
Intermediate
mahou-labsmahou-labs
1

email-and-password-best-practices

Configure email/password authentication with verification and password reset workflows in Better Auth.

Official
Advanced
AbrahamX3AbrahamX3
1

Convex Agents Rate Limiting

Implement fixed-window and token-bucket rate limiting for Convex-powered agents.

Community
Advanced
sckrollsckroll

email-and-password-best-practices

Configure Better Auth email and password authentication with verification and reset flows.

Community
Advanced