# authentication-best-practices > Use established authentication libraries rather than implementing from scratch Use when implementing security best practices. Security category skill. - Author: OmniaffixDave - Repository: OmniaffixDave/SessionGuardian - Version: 20260205125233 - Stars: 0 - Forks: 1 - Last Updated: 2026-02-08 - Source: https://github.com/OmniaffixDave/SessionGuardian - Web: https://mule.run/skillshub/@@OmniaffixDave/SessionGuardian~authentication-best-practices:20260205125233 --- --- name: authentication-best-practices description: Use established authentication libraries rather than implementing from scratch Use when implementing security best practices. Security category skill. metadata: category: Security priority: high is-built-in: true session-guardian-id: builtin_auth_best_practices --- # Authentication Best Practices Use established authentication libraries rather than implementing from scratch. Hash passwords with bcrypt, Argon2, or scrypt with appropriate cost factors. Implement rate limiting on login endpoints. Use secure session management with proper cookie flags (HttpOnly, Secure, SameSite). Support MFA for sensitive operations. Log authentication events for security monitoring.