/* hash */
$hash = password_hash($password, PASSWORD_BCRYPT);

/* hash vertify */
if (password_verify($password, $hash)) {
    /* Valid */
} else {
    /* Invalid */
}