two-factor-authentication-best-practices

Implement TOTP and OTP two-factor authentication with Better Auth.

Updated Apr 25, 2026

Search Tags:#security #MFA #Better Auth #two-factor authentication #login security

Ready to run

npx skills add https://github.com/mustafazeydani/nextjs-nestjs-monorepo-starter --skill two-factor-authentication-best-practices-mustafazeydani

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: two-factor-authentication-best-practices
Source: https://github.com/mustafazeydani/nextjs-nestjs-monorepo-starter/tree/main/.agents/skills/two-factor-authentication-best-practices
Command: npx skills add https://github.com/mustafazeydani/nextjs-nestjs-monorepo-starter --skill two-factor-authentication-best-practices-mustafazeydani

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires better-auth, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill unit provides a comprehensive guide to setting up and managing two-factor authentication using the Better Auth twoFactor plugin, addressing the need for secure user login processes.

Core Features & Use Cases

TOTP Setup: Walks through configuring TOTP authenticator apps and managing backup codes.
OTP Delivery: Shows how to send OTP codes via email/SMS and configure delivery options.
Backup Codes: Explains how to generate, display, and use backup codes for recovery.
Handling 2FA During Sign-In: Guides the implementation of 2FA sign-in flows.
Security Considerations: Offers insights into session management, rate limiting, and encryption at rest.

Quick Start

Run the two-factor-authentication-best-practices skill to set up 2FA for your application using Better Auth.

Frequently Asked Questions about two-factor-authentication-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I set up two-factor authentication using Better Auth?▼

To set up two-factor authentication with Better Auth, you configure the twoFactor plugin on your server to enable TOTP and OTP delivery options for secure user logins.

Does Better Auth support sending OTP codes via email and SMS?▼

Yes, Better Auth supports sending OTP codes via email and SMS. The twoFactor plugin allows you to configure delivery options for transmitting one-time passwords to users during login.

How do I generate and manage backup codes for 2FA in Better Auth?▼

You can generate and manage backup codes for 2FA in Better Auth using the twoFactor plugin. It provides functionality to display backup codes for users to securely recover their accounts.

What is the best way to handle 2FA flows during user sign-in?▼

The best way to handle 2FA flows during user sign-in is by implementing the secure 2FA sign-in flow provided by the Better Auth twoFactor plugin, managing TOTP and OTP verification seamlessly.

What security considerations are needed for two-factor authentication implementation?▼

Security considerations for two-factor authentication include managing session states, applying rate limiting to prevent brute force attacks, and ensuring encryption at rest for sensitive user data.

Can I use TOTP authenticator apps with Better Auth for login security?▼

Yes, you can use TOTP authenticator apps with Better Auth for login security. The twoFactor plugin walks through configuring TOTP apps and managing backup codes for robust authentication.