diff --git a/classes/userhelper.php b/classes/userhelper.php
index c09cabb125d75d8ca35b74903f186546d1d71cd2..0217a89275a640a00d5992e3a16b816d95cc7d02 100644
--- a/classes/userhelper.php
+++ b/classes/userhelper.php
@@ -334,6 +334,8 @@ class UserHelper {
 	}
 
 	static function is_default_password(): bool {
+
+		/** @var Auth_Internal|false $authenticator -- this is only here to make check_password() visible to static analyzer */
 		$authenticator = PluginHost::getInstance()->get_plugin($_SESSION["auth_module"]);
 
 		if ($authenticator &&