wp-includes/class-wp-application-passwords.php:484Hashes a plaintext application password.
$passwordstringstring public static function hash_password( #[\SensitiveParameter] string $password ): string { return wp_fast_hash( $password ); }Introduced in 6.8.0. Unchanged from 6.8.8 through 7.1.0.
Signature, return type and hooks compared across 4 parsed releases.
src/wp-includes/class-wp-application-passwords.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.