email-and-password-best-practices

Configure email/password authentication with verification and password reset workflows in Better Auth.

1|Updated Mar 12, 2026
One-click install
npx skills add https://github.com/mahou-labs/shiru --skill email-and-password-best-practices-mahou-labs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: email-and-password-best-practices
Source: https://github.com/mahou-labs/shiru/tree/main/.agents/skills/email-and-password-best-practices
Command: npx skills add https://github.com/mahou-labs/shiru --skill email-and-password-best-practices-mahou-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Configuring and securing email/password authentication flows with verification, password resets, and customizable hashing to protect user credentials.

Core Features & Use Cases

  • Email verification workflow to ensure valid addresses
  • Password reset flow to recover access
  • Customizable hashing and migration guidance for existing users

Quick Start

Enable email/password authentication and configure verification, reset, and hashing settings to secure user sign-in flows.

Frequently Asked Questions about email-and-password-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure email verification and password reset workflows in Better Auth?▼

To configure email verification and password reset workflows in Better Auth, enable email/password authentication and customize verification handlers, reset token expiries, and email sending logic to secure user sign-up and recovery flows.

What is the best way to secure email and password authentication for user sign-in?▼

Securing email and password authentication requires implementing customizable password hashing, enforcing email verification to validate addresses, and configuring dedicated password reset token expiries to protect credential-based login scenarios.

Does Better Auth support password hashing migration for existing users?▼

Yes, Better Auth supports password hashing migration by allowing you to configure customizable hashing settings, ensuring existing users can transition seamlessly to updated credential security standards during authentication.

How do I handle password reset token expiries for credential-based login?▼

Handling password reset token expiries involves configuring dedicated reset token lifespans within your authentication setup, ensuring recovery flows remain secure and time-bound for users requesting access recovery.

Why do I need email verification handlers in my authentication flow?▼

Email verification handlers are needed to ensure valid addresses during sign-up, preventing fake account creation and enabling secure recovery workflows before users can fully access credential-based login features.