WP_Application_Passwords::check_password( string $password, string $hash ): bool

500	public static function check_password(501		#[\SensitiveParameter]502		string $password,503		string $hash504	): bool {505		if ( ! str_starts_with( $hash, '$generic$' ) ) {506			/*507			 * If the hash doesn't start with `$generic$`, it is a hash created with `wp_hash_password()`.508			 * This is the case for application passwords created before 6.8.0.509			 */510			return wp_check_password( $password, $hash );511		}512 513		return wp_verify_fast_hash( $password, $hash );514	}