When creating a new user, you should generally set an initial password, then force the user to change it immediately. The following command expires the existing user password and requires the user to create a new password before logging in.
chage -d 0 username