diff --git a/reference/password/functions/password-verify.xml b/reference/password/functions/password-verify.xml
index b52b23bc0d..b7978d9f13 100644
--- a/reference/password/functions/password-verify.xml
+++ b/reference/password/functions/password-verify.xml
@@ -23,6 +23,9 @@
    the hash is included in it. This allows the verify function to verify the hash
    without needing separate storage for the salt or algorithm information.
   </para>
+  <para>
+   This function is safe against timing attacks.
+  </para>
  </refsect1>
 
  <refsect1 role="parameters">