wp_authenticate_user

in documentation of this hook

https://codex.www.ads-software.com/Plugin_API/Filter_Reference/wp_authenticate_user

tells that password is encrypted. but is not ??

in wp-includes/user.php, the filter run with original password:

$user = apply_filters('wp_authenticate_user', $user, $password);
	if ( is_wp_error($user) )
		return $user;

maybe it’s a bug or the documentation need an update