Login error

Ini Kenapa ya, seharusnya ketika login apabila password salah tidak bisa masuk ke index tapi ini malah masuk ke index kira-kira gimana ya

if (isset($_POST["masuk"])) {
   $username = $_POST["username"];
   $password = $_POST["password"];
   $result = mysqli_query($con,"SELECT * FROM tb_user WHERE username = '$username'  AND password = '$password'");
   $row = mysqli_fetch_assoc($result);
   $hash = password_hash($password, PASSWORD_DEFAULT);
   if(password_verify($password,$hash)){
         header("location: index.php");
         //set session
         $_SESSION["masuk"] = true;
         //cek remember me
         if (isset($_POST['remember']) == true) {
          //buat cookie
          setcookie('id', $row['id'], time() + 43800);
          setcookie('key', hash('sha256', $row['username']), time() + 43800 );
         }
         $error = true;
    }
}