W3cubDocs

apply_filters( 'wp_authenticate_user', WP_User|WP_Error $user, string $password )

Filters whether the given user can be authenticated with the provided $password.

$user: (WP_User|WP_Error) WP_User or WP_Error object if a previous callback failed authentication.
$password: (string) Password to check against the user.

This hook should return either a WP_User() object or, if generating an error, a WP_Error() object.

Used By	Description
wp-includes/user.php: wp_authenticate_email_password()	Authenticates a user using the email and password.
wp-includes/user.php: wp_authenticate_username_password()	Authenticate a user, confirming the username and password are valid.

Version	Description
2.5.0	Introduced.

© 2003–2019 WordPress Foundation
Licensed under the GNU GPLv2+ License.
https://developer.wordpress.org/reference/hooks/wp_authenticate_user