What problem does it solve? Setting up secure email and password authentication involves many moving parts: verification emails, reset flows, token expiry, session revocation, and hashing algorithms. This Skill consolidates the correct Better Auth configuration patterns so you avoid common security mistakes like timing attacks, weak password policies, or broken callback URLs. ## Core Features & Use Cases - Email Verification Setup: Configure sendVerificationEmail and optionally require verification before sign-in with requireEmailVerification. - Password Reset Flows: Implement sendResetPassword, control token expiry with resetPasswordTokenExpiresIn, and revoke sessions on reset with revokeSessionsOnPasswordReset. - Custom Password Hashing: Replace the default scrypt hashing with Argon2id by providing custom hash and verify functions. - Use Case: You are adding credential-based sign-up and sign-in to a Next.js app with Better Auth. Use this Skill to wire up verification emails, a secure reset flow with 30-minute token expiry, and Argon2id hashing, then run the CLI migration. ## Quick Start Ask the AI to configure Better Auth email and password authentication with email verification, a password reset flow, and Argon2id hashing in your auth config file.
