#better-auth
9 posts tagged better-auth. View all posts.
Best SaaS boilerplates with Better Auth in 2026: 5 kits compared
Five SaaS boilerplates built on Better Auth, compared as of November 2026: price, ORM, organizations, roles, payments and refunds, with honest picks.
Better Auth in a Turborepo monorepo: Next.js client, Express API, Bun workspaces
Run Better Auth in a Turborepo monorepo with a Next.js app and an Express API: where betterAuth() lives, shared contracts, env vars, cookies and Docker.
Better Auth rate limiting: the built-in limiter, its blind spots, and what to add
How Better Auth rate limiting works: defaults, per-path rules, storage, the auth.api blind spot and spoofable IPs, plus express-rate-limit tiers on Redis.
Better Auth magic link: setup, security defaults, and the gotchas
Set up Better Auth magic link sign-in: sendMagicLink, expiry, disableSignUp, token storage, rate limits and the 2FA bypass you have to close yourself.
Better Auth 2FA con TOTP: enrolá, verificá e iniciá sesión con un código
Sumá 2FA con TOTP a Better Auth: el plugin twoFactor, el flujo enable y verify, el desafío al iniciar sesión y los huecos que dejan los magic links.
Better Auth 2FA with TOTP: enroll, verify, and sign in with a code
Add TOTP two-factor auth to Better Auth: the twoFactor plugin, the enroll then verify flow, the sign-in challenge, and the gaps magic links leave open.
Organizaciones con Better Auth: multi-tenant paso a paso
Armá organizaciones multi-tenant con el plugin organization de Better Auth: server, cliente, invitaciones y roles. Y cómo lo hace useDeploy sin el plugin.
Better Auth organizations: multi-tenant setup, step by step
Set up multi-tenant organizations with the Better Auth organization plugin: server, client, invitations, roles. Plus how useDeploy does it without it.
BETTER_AUTH_SECRET: what it is, how to generate it, how to rotate it
BETTER_AUTH_SECRET signs sessions and encrypts 2FA secrets. Generate it with openssl, set it per environment, and rotate it with BETTER_AUTH_SECRETS.