Does Bknd have a built-in forgot-password flow?

No, Bknd provides core hashing methods but requires you to implement the token generation and email logic manually, which this skill helps you automate.

Is it safe to set passwords directly in the Bknd UI?

No, editing the password field in the Admin UI sets a raw value. You must use the changePassword() method to ensure the password is encrypted using the configured hashing algorithm.

Can I use this for OAuth or Social login users?

No, password reset logic only applies to users using the 'password' strategy. Social login users manage credentials through their specific providers (e.g., Google, GitHub).

How do I prevent email enumeration with this skill?

The skill provides implementation patterns that return generic success messages regardless of whether an email exists, preventing attackers from discovering registered users.

Bknd Password Reset & Management

Name: Bknd Password Reset & Management
Author: cameronapak

bycameronapak

•

API Development

Implements secure password reset flows, server-side hashing, and email token validation for Bknd applications.

The Bknd Password Reset skill provides comprehensive guidance and implementation patterns for managing user credentials within the Bknd ecosystem. Since Bknd lacks a native 'forgot-password' flow, this skill bridges the gap by offering secure methods for server-side hashing, cryptographically safe token generation, and the creation of custom API endpoints for email-based recovery. It covers everything from admin-initiated resets to authenticated user password changes and critical security considerations like rate limiting and email enumeration prevention.

Key Features

01Secure reset token generation and lifecycle management

021 GitHub stars

03Custom 'forgot password' API endpoint implementation patterns

04React frontend components for reset requests and confirmation

05Security best practices for rate limiting and OAuth protection

06Server-side password hashing via changePassword() method

Use Cases

01Implementing admin-level password overrides using backend scripts or custom endpoints

02Allowing authenticated users to change their passwords within a profile dashboard

03Building a production-ready 'Forgot Password' email recovery system

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add cameronapak/bknd-skills bknd-password-reset

For use in Claude.ai and ChatGPT

Download Skill