diff --git a/reference/password/functions/password-verify.xml b/reference/password/functions/password-verify.xml index e2ccb98dbc..b52b23bc0d 100644 --- a/reference/password/functions/password-verify.xml +++ b/reference/password/functions/password-verify.xml @@ -17,6 +17,12 @@ Verifies that the given hash matches the given password. + + Note that password_hash returns the algorithm, cost and salt + as part of the returned hash. Therefore, all information that's needed to verify + the hash is included in it. This allows the verify function to verify the hash + without needing separate storage for the salt or algorithm information. +