yiibaseSecurity::validatePassword('123qweASD', '46e44aa0bc21d8a826d79344df38be4b')

if (!preg_match('/^$2[axy]$(dd)$[./0-9A-Za-z]{22}/', $hash, $matches)
            || $matches[1] < 4
            || $matches[1] > 30
        ) {
            throw new InvalidArgumentException('Hash is invalid.');
        }