email-and-password-best-practices

When to Apply This Skill

Use this pattern when you need to:

• Set up Better Auth email/password sign-up and sign-in flows.
• Implement email verification requirements and delivery hooks.
• Build password reset request and reset-token handling.
• Configure password policies, reset token expiry, and session revocation.
• Customize password hashing/verification algorithms for credential auth.

Quick Start

Reference Repositories

• Better Auth — TypeScript authentication framework with plugins

Upstream Grounding

When Better Auth email/password API shape, verification hooks, reset-token behavior, password policy options, hashing behavior, or security defaults affect correctness, ask DeepWiki a narrow question against better-auth/better-auth before relying on memory. Use it to orient, then verify decisive details against local installed types, source, or official docs before changing code.