password_verify(): Matching user entered password with stored password

Verify the submitted password against the stored hash

Fetch the stored hash for the account, then use password_verify(). Do not hash the submitted password again and compare strings.

<?php
$submittedPassword = $_POST['password'] ?? '';
$storedHash = $user['password_hash'] ?? '';

if ($storedHash !== '' && password_verify($submittedPassword, $storedHash)) {
    echo 'Password accepted';
} else {
    echo 'Invalid password';
}
?>

Current example first; the detailed tutorial examples below are retained for additional learning and comparison.

$str="plus2net.com";
$str_hash=password_hash($str,PASSWORD_DEFAULT);
//echo $str_hash;

if(password_verify($str,$str_hash)){
echo " Matching  ";
}else{
echo " Not matching ";
}

Output is

Matching

Syntax

password_verify('$entered_string',$hash_string);

Parameter	DESCRIPTION
$entered_string	Required : Input password string ( user entered )
$hash_string	Required : Hash created by password_hash().

Output is Boolean , True or False

Always include the has variable in single quotes and not in double quotes. The presence of $ will change the value

crypt() and password_ferify()

$str="plus2net.com";
$str_crypt_hash = crypt($str);
///////////
if(password_verify('plus2net.com',$str_crypt_hash)){
echo " Matching  ";
}else{
echo " Not matching ";
}

Output is

Matching

Example: Verifying a Correct Password

$password = "secure123";
$hash = password_hash($password, PASSWORD_DEFAULT);
if (password_verify("secure123", $hash)) {
    echo "Password is correct!";
} else {
    echo "Password is incorrect!";
}

Example: Verifying an Incorrect Password

$password = "secure123";
$hash = password_hash($password, PASSWORD_DEFAULT);
if (password_verify("wrong_password", $hash)) {
    echo "Password is correct!";
} else {
    echo "Password is incorrect!";
}

Example: Checking if the Hash Needs Rehashing

$hash = password_hash("mypassword", PASSWORD_DEFAULT);
if (password_verify("mypassword", $hash)) {
    if (password_needs_rehash($hash, PASSWORD_DEFAULT)) {
        $newHash = password_hash("mypassword", PASSWORD_DEFAULT);
        echo "Password rehashed!";
    }
}

String Functions password_hash(): Generate password hash

Subhendu Mohapatra

Author & Instructor at plus2net

I write and maintain practical tutorials on Python, PHP, SQL, JavaScript, HTML, jQuery, and web development at plus2net. The tutorials focus on clear explanations, working examples, and code that readers can test and adapt while learning.

About the author Watch on YouTube

Connect:

Subscribe to our YouTube Channel here

Verify Password Hashes with password_verify()