In Linux, all password hashes are normally stored using the MD5 hashing algorithm in the /etc/shadow file, but MD5 is algorithmically weak due to collision vulnerabilities. The new recommended ...

This will prompt you to type and verify a new password. Once you’ve set that, you can then expire the password with the command: sudo passwd --expire USER Where USER is the new username we created.