The recommended way to create a non-root user on a server is passwordless: the account has no usable password at all, you log in with an SSH key, and sudo is granted without a password prompt. There is no password to guess, phish, or reuse, and nothing to type when you sudo.
SSH key authentication uses a key pair: a private key that stays on your machine, and a public key you install on each server you connect to. Once it's set up you log in without typing a password, and the server can drop password logins entirely.
Set up X11 forwarding for SSH connections from Windows 11 to a remote Linux host.
To store a password-protected SSH key in the SSH agent so you don't have to enter the password over and over, run this command — you'll be prompted to enter the password once: