two-factor-authentication-best-practices

Setup

1. Add twoFactor() plugin to server config with issuer
2. Add twoFactorClient() plugin to client config
3. Run npx auth@latest migrate (built-in adapter) or generate + push for Drizzle/Prisma
4. Verify: check that twoFactorSecret column exists on user table

import { betterAuth } from "better-auth";
import { twoFactor } from "better-auth/plugins";