As with many questions the answer is "it depends" If you are trying to learn authentication then yes go ahead and implement it. But if you are trying to build

As with many questions the answer is "it depends" If you are trying to learn authentication then yes go ahead and implement it. But if you are trying to build a commercial grade product, then your best bet is to use a 3rd party library or commercial service that has been tested and it's stable and reviewed for security.