dont use md5 for password hashing using password_hash and password_verify
apparently md5 is not the best method for password hashing, you should use the php functions
password_hash();
and then
password_verify();
to verify the hash matches
PHP
password_hash("my strong password!", PASSWORD_DEFAULT)