email-and-password-best-practices
Secure email verification and password reset flows with timing attack prevention and custom hashing for Better Auth.
Install
npx skills add https://github.com/better-auth/skills --skill email-and-password-best-practicesStats
| Total installs | 6,768 |
| Weekly installs | 6.7K |
| GitHub stars | 163 |
| First seen | Feb 10, 2026 |
| Source | @better-auth/skills |
Summary
- Supports email verification with optional enforcement to block sign-in until verified, plus configurable token expiration and single-use reset tokens
- Password reset flows with built-in security: background email sending, timing attack prevention, dummy operations on invalid requests, and optional session revocation on reset
- Configurable password length limits (default 8–256 characters) and custom hashing algorithms via pluggable hash and verify functions
- Requires absolute callback URLs and sendVerificationEmail / sendResetPassword functions to integrate with your email provider
Tags
Related skills
| Skill | Installs | vs email-and-password-best-practices |
|---|---|---|
| react-doctor | 6,446 | -322 |
| clerk-nextjs-patterns | 5,682 | -1,086 |
| gws-admin-reports | 6,093 | -675 |
| gws-modelarmor-sanitize-prompt | 5,718 | -1,050 |
| ef-core | 7,528 | +760 |
FAQ
- How many installs does email-and-password-best-practices have?
- email-and-password-best-practices has 6,768 total installs and 6.7K installs this week.
- Where is email-and-password-best-practices hosted?
- email-and-password-best-practices is published by @better-auth/skills at https://github.com/better-auth/skills.
- How many GitHub stars does email-and-password-best-practices have?
- email-and-password-best-practices has 163 GitHub stars.
- When was email-and-password-best-practices first indexed?
- OrangeBot.AI first indexed email-and-password-best-practices on Feb 10, 2026.
- How do I install email-and-password-best-practices?
- Run: npx skills add https://github.com/better-auth/skills --skill email-and-password-best-practices