I came across a problem today in which a user could not reset her password without getting the “ORA-28221: REPLACE not specified” error.

The correct “alter user” syntax to resolve this error is:

alter user USERNAME identified by NewPassword replace OldPassword;