email-and-password-best-practices

Mechanism

When It Triggers · How It Works · What It Produces

Breaks down how the skill works and what it produces, so you can quickly judge whether it fits your scenario and value.

Trigger Timing

When users need to set up email/password auth with Better Auth: email verification, password reset, password policies, or custom hashing.

Working Mechanism

Guide enabling emailAndPassword and configuring sendVerificationEmail / sendResetPassword
Show client validation, absolute callback URLs, token expiry and session revocation settings
Provide code for custom hash/verify (e.g. Argon2id) and npx @better-auth/cli migrate

Outcome

A secured Better Auth email/password setup: verified users, safe resets, strong password rules, and configurable hashing.

Use Cases

Two Typical Use Cases

Scenario 01

Secure sign-up with email verification

A developer building a TS app needs sign-up with email confirmation. Using this skill, they configure `sendVerificationEmail` and `requireEmailVerification`, run the migrate CLI, and get a flow that blocks unverified sign-ins — reducing fake accounts and improving trust.

Scenario 02

Harden password reset and hashing

A team wants safer password resets and Argon2 hashing. The skill shows `sendResetPassword`, token expiry, session revocation, and custom `hash`/`verify`. They implement reset emails, 30-min tokens, and revoke sessions — mitigating theft and meeting security standards.

Skill Relationships

Which Skills I Use · Which Skills Use Me

Dependency relationships read as "the upper tier points to the lower tier." The current Skill sits in the middle tier — above are Skills that depend on it, below are Skills it depends on.

Tier 1 · These Skills Use Me

No explicit dependency

Tier 2 · Current Skill

email-and-password-best-practicesStyle Guide

Tier 3 · I Use These Skills

No explicit dependency on other Skills

Full Relationship Graph

Browse this skill's relationships within its skillset. Click a node to switch the side panel; use the search box to jump to any skill.

Skill File

SKILL.md

Open in GitHub ↗

SKILL.mdLoading from GitHub…

Skill Composition

Open in GitHub ↗

SKILL.md100.0%

▸skills/email-and-password-best-practices/
▸root
- ·SKILL.md

Per the Agent Skills spec, SKILL.md is the only required file. The colored bars classify the rest into the three spec-aligned optional directories (scripts / references / assets) and an 'other' bucket. The full directory tree is below.

Related in Skillset

You May Also Need These Skills

create-auth

Scaffolds and implements authentication in TS/JS apps using Better Auth. Detects frameworks, configures DB adapters, route handlers, OAuth, and auth UI. Outputs a planned, step-by-step integrated auth setup, accelerating secure login/sign-up delivery.

Workflow

better-auth-security-best-practices

Provides security best practices for Better Auth: secret management, rate limiting, CSRF, trusted origins, session/cookie security, OAuth token encryption, IP tracking, and audit logging. Delivers hardened auth configs and a production checklist to prevent attacks and protect user data.

Style Guide · Workflow

two-factor-authentication-best-practices

Configures TOTP authenticator apps, email/SMS OTP, backup codes, trusted devices, and 2FA sign-in flows using Better Auth's twoFactor plugin. Provides setup steps, code snippets, and security configs. Delivers hardened MFA for TypeScript apps with secure session and recovery.

Style Guide · Workflow

organization-best-practices

Configures multi-tenant orgs, members, invitations, teams and RBAC via Better Auth organization plugin. Provides setup steps, code samples, limits and security tips. Value: fast, secure org/access-control implementation.

Style Guide · Workflow

/email-and-password-best-practices

When It Triggers · How It Works · What It Produces

Trigger Timing

Working Mechanism

Outcome

Two Typical Use Cases

Secure sign-up with email verification

Harden password reset and hashing

Which Skills I Use · Which Skills Use Me

Full Relationship Graph

SKILL.md

Skill Composition

You May Also Need These Skills

create-auth

better-auth-security-best-practices

two-factor-authentication-best-practices

organization-best-practices

When It Triggers · How It Works · What It Produces

Trigger Timing

Working Mechanism

Outcome

Which Skills I Use · Which Skills Use Me

Full Relationship Graph

SKILL.md

Skill Composition

You May Also Need These Skills

create-auth

better-auth-security-best-practices

two-factor-authentication-best-practices

organization-best-practices