PHP Conference Nagoya 2025

    sodium_crypto_pwhash_str_verify

    (PHP 7 >= 7.2.0, PHP 8)

    sodium_crypto_pwhash_str_verify — Verifies that a password matches a hash

    Description

    sodium_crypto_pwhash_str_verify(string $hash, #[\SensitiveParameter] string $password): bool

    Checks that a password hash created using sodium_crypto_pwhash_str() matches a given plain-text password. Note that the parameters are in the opposite order to the same parameters in the similar password_verify() function.

    Parameters

    hash

    A hash created by password_hash().

    password

    The user's password.

    Return Values

    Returns true if the password and hash match, or false otherwise.

    Notes

    Note:

    Hashes are calculated using the Argon2ID algorithm, providing resistance to both GPU and side-channel attacks.

    See Also

    Found A Problem?

    Learn How To Improve This Page • Submit a Pull Request • Report a Bug
    ＋add a note

    User Contributed Notes

    There are no user contributed notes for this page.
    To Top