(PHP 7 >= 7.2.0, PHP 8)
sodium_crypto_pwhash_str_verify — Verifies that a password matches a hash
Checks that a password hash created using sodium_crypto_pwhash_str() matches a given plain-text password. Note that the parameters are in the opposite order to the same parameters in the similar password_verify() function.
hash
A hash created by password_hash().
password
The user's password.
Note:
Hashes are calculated using the Argon2ID algorithm, providing resistance to both GPU and side-channel attacks.