email-and-password-best-practices

Configure email verification and password reset workflows for Better Auth.

Updated Jan 17, 2026
One-click install
npx skills add https://github.com/lDuang/mcp-skill-registry --skill email-and-password-best-practices-lduang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: email-and-password-best-practices
Source: https://github.com/lDuang/mcp-skill-registry/tree/main/skill/emailAndPassword
Command: npx skills add https://github.com/lDuang/mcp-skill-registry --skill email-and-password-best-practices-lduang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Configure email verification, implement password reset flows, set password policies, and customise hashing algorithms for Better Auth.

Core Features & Use Cases

  • Email verification to ensure valid user addresses before sign-in.
  • Password reset flows with secure token handling and expiry.
  • Password policy customization and hashing algorithm options for security hardening.
  • Use Case: When onboarding new users, automatically enforce verification and password policies.

Quick Start

Enable email/password, configure verification emails, and add password reset to secure user accounts in your app.

Frequently Asked Questions about email-and-password-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure email verification workflows for Better Auth?▼

To configure email verification for Better Auth, you set up the sendVerificationEmail function to ensure user addresses are validated before sign-in. This process secures onboarding by automatically enforcing verification policies.

What is the best way to implement password reset flows with secure tokens?▼

Implementing password reset flows requires configuring the sendResetPassword function using Better Auth. This mechanism handles secure token generation and expiry to safely manage credential recovery.

How do I customize password policies and hashing algorithms for user sign-in?▼

You customize password policies and hashing algorithms by defining hash and verify functions within Better Auth. This security hardening enforces specific credential requirements during user sign-in.

Does Better Auth support optional session revocation during credential management?▼

Yes, Better Auth supports optional session revocation during credential management. You can configure this alongside password reset workflows to immediately invalidate active user sessions.

Can I apply these authentication security policies to mobile apps?▼

Yes, you can apply these authentication security policies to mobile apps. Better Auth supports signup, sign-in, and credential management scenarios across diverse web and mobile environments.