device# configure terminal
device(config)# password-attributes force-default-password-change
When the user logs in for the first time, they will be forced to change their password.