Configurin logstash,elasticsearch and kibana after enabling xpack

Hi ikavkas thank you so much,
I have another question, i understood elasticsearch saves built-in users passwords in .security file, does it also save the new users and their passwords there?
And does it by default hash or encrypt them before storing them,or do i have to do it?
Thanks for the patience