Description
email-and-password-best-practices is an agent skill from the better-auth skills collection that helps a coding agent set up email and password sign-in in a Better Auth project. It covers email verification, password reset flows, password policies and customizable password hashing. The quick start steps are to enable email and password sign-in in the config, configure emailVerification.sendVerificationEmail to send verification emails, add sendResetPassword to support password reset, and run the Better Auth migration command to update the database. The skill then asks the agent to verify the setup by attempting a sign-up and confirming the verification email is sent. Email verification can be enforced, which blocks sign-in until a user has verified their address. Verification and reset tokens have configurable expiry, and reset tokens are single-use. The skill is listed on skills.sh, where the page shows install counts, the repository's GitHub stars and the results of its security audits, all of which pass.…
Highlights
- Email and password sign-in setup
- Email verification with optional enforcement
- Password reset flows with single-use tokens
- Configurable token expiration
- Password policies and hashing options
- Installs from skills.sh
Ratings & Reviews
No ratings yet
Be the first to rate email-and-password-best-practices.
People also visit
email-and-password-best-practices FAQ
What does this skill cover?
Setting up email and password sign-in in Better Auth: email verification, password reset flows, password policies and hashing.
What are the setup steps?
Enable emailAndPassword in the config, configure emailVerification.sendVerificationEmail, add sendResetPassword, and run npx auth@latest migrate.
Can I block sign-in until email is verified?
Yes. The skill says email verification can be enforced, which blocks sign-in until the user verifies.
Are reset tokens single-use?
Yes. The skill describes reset tokens as single-use, with configurable expiration.
How do I install it?
Run npx skills add https://github.com/better-auth/skills --skill email-and-password-best-practices.
What are the security audit results?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best email-and-password-best-practices alternatives?
Popular alternatives to email-and-password-best-practices include better-auth-security-best-practices, flowstudio-power-automate-mcp and clerk-testing. See all email-and-password-best-practices alternatives