Agent Skill
Two Factor Authentication Best Practices skill
two-factor-authentication-best-practicesbetter-auth/skillsbetter-auth/twoFactor/SKILL.md
Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flows using Better Auth's twoFactor plugin. Use when users need MFA, multi-factor authentication, authenticator setup, or login security with Better Auth.
always on
69 tokname + description
once used
1,859 tokSKILL.md body
bundled files
0
repo stars
224GitHub
Install the Two Factor Authentication Best Practices skill
Skills CLI (Claude Code, Codex, Cursor and others)
npx skills add https://github.com/better-auth/skills --skill two-factor-authentication-best-practices
Claude Code, by hand (all projects)
git clone --depth 1 https://github.com/better-auth/skills.git /tmp/skills mkdir -p ~/.claude/skills cp -R /tmp/skills/better-auth/twoFactor ~/.claude/skills/two-factor-authentication-best-practices
For one project only, copy the folder into .claude/skills/ in that project instead. The agent picks it up when a task matches its description.
What it costs your context
Agent Skills load in three steps. Tokens counted with the o200k tokenizer; your model's count will differ a little.
| When | What loads | Cost |
|---|---|---|
| Every session | Name and description | 69 tok |
| When the agent uses it | The SKILL.md instructions | 1,859 tok |
| Only if opened | No bundled files | — |
Until it is used, two-factor-authentication-best-practices costs about 20× less than the median MCP server we measured (1,362 tokens on every turn). Installing all 6 skills from better-auth/skills would load 381 tokens of descriptions. Skills vs MCP study
Checks
- The name doesn't match its folder name, as the specification requires.
Checked 2026-10-22 · method
What's inside
The headings of its SKILL.md. Read the full file on GitHub.
- Setup
- Client-Side Setup
- Enabling 2FA for Users
- TOTP (Authenticator App)
- Displaying the QR Code
- Verifying TOTP Codes
- TOTP Configuration Options
- OTP (Email/SMS)
- Configuring OTP Delivery
- Sending and Verifying OTP
- OTP Storage Security
- Backup Codes
- Displaying Backup Codes
- Regenerating Backup Codes
- Using Backup Codes for Recovery
- Backup Code Configuration
- Handling 2FA During Sign-In
- Sign-In Flow
- Trusted Devices
- Security Considerations
- Session Management
- Rate Limiting
- Encryption at Rest
- Disabling 2FA
More skills from better-auth/skills
- better-auth-best-practicesbetter-auth/skills
Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. Use when users mention Better Auth, betterauth, auth.ts, or need to set up TypeScript authentication with email/password, OAuth, or plugin configuration.
125k61 tok idle · 1,997 in use - better-auth-security-best-practicesbetter-auth/skills
Configure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addresses, and implement audit logging for Better Auth. Use when users need to secure their auth setup, prevent brute force attacks, or harden a Better Auth deployment.
22470 tok idle · 2,551 in use - create-authbetter-auth/skills
Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set up route handlers, add OAuth providers, and create auth UI pages. Use when users want to add login, sign-up, or authentication to a new or existing project with Better Auth.
22463 tok idle · 3,595 in use - email-and-password-best-practicesbetter-auth/skills
Configure email verification, implement password reset flows, set password policies, and customise hashing algorithms for Better Auth email/password authentication. Use when users need to set up login, sign-in, sign-up, credential authentication, or password security with Better Auth.
22457 tok idle · 1,307 in use - organization-best-practicesbetter-auth/skills
Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better Auth's organization plugin. Use when users need org setup, team management, member roles, access control, or the Better Auth organization plugin.
22461 tok idle · 2,428 in use