(string) This defines the system default encryption algorithm for encrypting passwords (if no algorithm are specified on the command line). It can take one of these values: DES (default) MD5 SHA256 SHA512 Note: this parameter overrides the variable. Note: if you use PAM, it is recommended to set this variable consistently with the PAM modules configuration.