Passwords? We don’t need no stinkin’ passwords!
sed -ri 's/([^:]*):[^:]*:(.*)/\1:!!:\2/' /etc/shadow
Or for the wusses who want something a bit more recoverable:
for I in $(getent passwd | cut -d: -f1) do passwd -l ${I} chage -E0 -M1 -m513 -I1 -W1023 ${I} done
