diff --git a/classes/userhelper.php b/classes/userhelper.php
index c09cabb12..0217a8927 100644
--- a/classes/userhelper.php
+++ b/classes/userhelper.php
@@ -334,6 +334,8 @@ class UserHelper {
 	}
 
 	static function is_default_password(): bool {
+
+		/** @var Auth_Internal|false $authenticator -- this is only here to make check_password() visible to static analyzer */
 		$authenticator = PluginHost::getInstance()->get_plugin($_SESSION["auth_module"]);
 
 		if ($authenticator &&