# better-auth-security-best-practices

- **Publisher**: Better Auth (Verified Publisher)
- **Repository**: https://github.com/better-auth/skills
- **skills.sh URL**: https://skills.sh/better-auth/skills/better-auth-security-best-practices
- **License**: MIT
- **Stars**: 18,400
- **Canonical Web Page**: https://builderthread.dev/skill/better-auth/skills/better-auth-security-best-practices
- **Parent Topic**: [security](https://builderthread.dev/skill/for/security.md)
- **Last Verified**: 2026-11-02
- **Supported Coding Agents**: Claude Code, Cursor, Codex, Windsurf

## Description
Security-focused hardening rules for authentication endpoints, secure cookie attributes, brute-force mitigation, and token revocation.

## Install Command
```bash
npx skills add better-auth/skills --skill better-auth-security-best-practices
```

## When to Use This Skill
- Hardening authentication routes and session cookies against CSRF and XSS
- Implementing rate limiting on login, registration, and password reset endpoints
- Configuring token revocation upon logout and password changes

## Files Inside Package
- `SKILL.md`
- `references/csrf.md`
- `references/cookies.md`

---

## Production Grade Starter Repo

Pre built starter repo with auth, databases, backend, and AI integrations already configured based on your tech stack of choice (worth $200+ and saves you 30+ hours of configuration).

- Supported languages: TypeScript, React Native, Rust, Go, Python, Java
- Frameworks: 18+ Frontend frameworks, 45+ Backend frameworks
- Start now: https://builderthread.dev/auth/signup