PHP Password verify always returns false

Question

I\'m using PHP\'s password hashing API to hash and verify my passwords on a site I\'m building, however whenever I try and verify my password it always returns false.

Answer 1

The given hash string example has 50 characters instead of 60. Double-Check the database - CHAR(60) - and var_dump($hash).

Answer 2

Other problem that you can have, is when you reduce the cost in the server for gaining time.

Always use password_hash($pass, PASSWORD_DEFAULT), is the best way.