Overview
KB
Technical FAQ
PHP Manual
CSS2 Manual
HTML Manual
JS Guide
JS Reference
PhpDock Manual
Nu-Coder Manual
PhpExpress Manual
PHP Joomla
Development
Learn PHP
 
<sodium_crypto_pwhash_str_needs_rehashsodium_crypto_scalarmult>
^Sodium FunctionsLast updated: Mon, 26 Oct 2026

sodium_crypto_pwhash_str_verify

(PHP 7 >= 7.2.0, PHP 8)

sodium_crypto_pwhash_str_verify — Verifies that a password matches a hash

Description

function sodium_crypto_pwhash_str_verify(string $hash, #[\SensitiveParameter] string $password): bool

Checks that a password hash created using sodium_crypto_pwhash_str() matches a given plain-text password. Note that the parameters are in the opposite order to the same parameters in the similar password_verify() function.

Parameters

hash

A hash created by password_hash().

password

The user's password.

Return Values

Returns true if the password and hash match, or false otherwise.

Notes

Note:

Hashes are calculated using the Argon2ID algorithm, providing resistance to both GPU and side-channel attacks.

See Also


<sodium_crypto_pwhash_str_needs_rehashsodium_crypto_scalarmult>
^Sodium FunctionsLast updated: Mon, 26 Oct 2026