emailAndPassword

Handles email/password authentication for Better Auth, covering sign-up, sign-in, email verification, password reset flows, and password hashing configuration. Supports policies like minimum length, token expiry, and session revocation on reset. Hashing defaults to scrypt but can be swapped for Argon2id or any custom algorithm. Wiring up password reset flows, email verification gates, and hashing policies from scratch involves non-trivial timing-attack mitigations and token lifecycle management that this handles out of the box.