diff --git a/system/user.go b/system/user.go
index af9269d..79746cd 100644
--- a/system/user.go
+++ b/system/user.go
@@ -34,6 +34,8 @@ func CreateUser(u *User) error {
 
 	if u.PasswordHash != "" {
 		args = append(args, "--password", u.PasswordHash)
+	} else {
+		args = append(args, "--password", "*")
 	}
 
 	if u.GECOS != "" {