sodium_crypto_pwhash_str_verify

Verifies that a password matches a hash

&reftitle.description; `bool` `sodium_crypto_pwhash_str_verify` `string` `hash` #[\SensitiveParameter]`string` `password`

Checks that a password hash created using `sodium_crypto_pwhash_str` matches a given plain-text password. Note that the parameters are in the opposite order to the same parameters in the similar `password_verify` function.

&reftitle.parameters;

`hash`

- &password.parameter.hash;

`password`

- &password.parameter.password;

&reftitle.returnvalues;

Returns &true; if the password and hash match, or &false; otherwise.

&reftitle.notes;

Hashes are calculated using the Argon2ID algorithm, providing resistance to both GPU and side-channel attacks.

&reftitle.seealso;

- `sodium_crypto_pwhash_str`
- `password_hash`
- `password_verify`