The fix was to use this command: if (password_verify($plain, $customers_password)){