Better Auth Best Practices

What it does

This skill provides guidance and recommendations for implementing secure authentication practices. It helps ensure user credentials are protected, minimizes vulnerabilities to common attacks like brute force or credential stuffing, and aligns with industry best practices. The skill aims to improve overall application security by focusing on robust authentication mechanisms.

When to use it

• When designing a new application requiring user accounts and login functionality.
• During code reviews for applications handling sensitive user data.
• To audit existing authentication systems and identify potential weaknesses.
• When migrating an application to more secure authentication methods (e.g., from basic auth to OAuth).

Key capabilities

• Provides recommendations on password storage best practices.
• Offers guidance on multi-factor authentication implementation.
• Suggests mitigation strategies for common authentication attacks.
• Advises on secure session management techniques.

Example prompts

• "What are the best practices for securely storing user passwords?"
• "How can I implement multi-factor authentication in my application?"
• "Can you review this code snippet and identify any potential authentication vulnerabilities?"

Tips & gotchas

This skill assumes a basic understanding of authentication concepts. While it provides guidance, implementing these recommendations may require specialized security expertise or tools.