skills.rest
spike-land-ai
spike-land-aiOFFICIAL
Explore all skills by this author →
GitHub

two-factor-authentication-best-practices

Implement secure two-factor authentication with Better Auth's twoFactor plugin.

1|1|Updated Feb 27, 2026
Search Tags:#security#authentication#best-practices#otp#totp#two-factor-authentication#backup-codes
One-click install
npx skills add https://github.com/spike-land-ai/spike-land-ai --skill two-factor-authentication-best-practices-spike-land-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: two-factor-authentication-best-practices
Source: https://github.com/spike-land-ai/spike-land-ai/tree/main/.agents/skills/two-factor-authentication-best-practices
Command: npx skills add https://github.com/spike-land-ai/spike-land-ai --skill two-factor-authentication-best-practices-spike-land-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides guidance and enforcement rules for implementing secure two-factor authentication (2FA) using Better Auth's twoFactor plugin. It addresses the common challenge of securing user accounts beyond passwords by outlining recommended setup, verification flows, and security considerations.

Core Features & Use Cases

  • TOTP-based verification with configurable issuer/appName
  • OTP delivery and backup codes management guidance
  • Client-side and server-side integration patterns, including migration notes
  • Security considerations: secret storage, device trust, and rate limiting

Quick Start

Enable 2FA for users with the Better Auth twoFactor plugin and complete the initial verification to activate the flow.

Frequently Asked Questions about two-factor-authentication-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement two-factor authentication using Better Auth?▼

Implement two-factor authentication by initializing the Better Auth twoFactor plugin, configuring TOTP verification, and completing the initial verification flow to activate secure user logins.

What is the best way to manage backup codes and OTP delivery for 2FA?▼

The best practice for managing backup codes and OTP delivery involves following the twoFactor plugin's guided setup patterns to securely generate, distribute, and store recovery options.

How does TOTP verification work with credential accounts?▼

TOTP verification works with credential accounts by generating time-based one-time passwords using a configurable issuer or appName, requiring users to validate the code during login.

Can I handle 2FA session management across both client and server environments?▼

Yes, you can handle 2FA session management across client and server environments using the integration patterns provided by the Better Auth twoFactor plugin.

What security considerations should I follow for 2FA secret storage and device trust?▼

Security considerations for 2FA include implementing safe secret storage, establishing trusted devices, and applying rate limiting to protect verification flows from abuse.

Related Skills

Explore More Software Engineering Skills→
LeroyAdonisLeroyAdonis

better-auth-best-practices

Configure Better Auth servers and clients with adapters, plugins, and environment variables.

Community
Advanced
vcnttttvcntttt
1

better-auth-best-practices

Configure Better Auth in TypeScript apps with adapters, plugins, and CLI migrations.

Community
Intermediate
mgkyawzayyamgkyawzayya
1

security-review

Audit Laravel and React code for OWASP Top 10 vulnerabilities.

Community
Advanced
devkit-stackdevkit-stack

create-auth-skill

Configure Better Auth authentication for TypeScript/JavaScript applications.

Official
Intermediate