Skip to content
← Tools / Skills
Skill · .md packagepleaseai/10 trustMetrics-checked

Better Auth Skills

Claude Code plugin pack for Better Auth — email/password, 2FA, OAuth, magic links, and scaffolding skills.

Visit official site →

About

The better-auth plugin from pleaseai's claude-code-plugins collection: a set of focused agent skills for implementing authentication with Better Auth. Covers email/password best practices (verification flows, password reset, hashing config), two-factor authentication (TOTP, OTP, backup codes, trusted devices), auth scaffolding (framework detection, DB adapters, OAuth providers, auth UI pages), and general best practices for server/client config, sessions, and plugins. Each skill has trigger descriptions so agents load the right one per task.

The honest picture: community-maintained against Better Auth's fast-moving API — always verify generated config against better-auth.com/docs for your installed version. Auth is high-stakes; treat skill output as a starting draft and review session handling, secret management, and callback URLs yourself before shipping.

What it can do

  • Email/password setup with verification and reset flows
  • 2FA: TOTP, OTP via email/SMS, backup codes
  • Auth scaffolding: adapters, OAuth providers, UI pages
  • Plugin guidance: organization, magic link, passkey
  • Security best practices for sessions and secrets

Setup

Add the pleaseai plugin marketplace to Claude Code, then install the better-auth plugin. Individual skills trigger automatically from their descriptions when you discuss auth tasks.

Prerequisites

Claude Code; a TypeScript project with better-auth installed (or planning to add it).

Use cases

authenticationsecuritytypescript

Works with

Trust score — 6/10

/10 trustMetrics-checked

Scored 6/10 (metrics tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 48; Trending score 60/100 from researcher assessment.

Sources

Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.