ORA-28001 Password Expired in Oracle – Complete Step-by-Step Fix

ORA-28001: Password Expired in Oracle – Complete Solution

The ORA-28001: the password has expired error is a common issue in Oracle Database that prevents users from logging in when their password exceeds the allowed lifetime defined in profile settings.

This guide explains the causes, solutions, and prevention methods to fix this error quickly.

What is ORA-28001 Error?

ORA-28001 occurs when a user password expires based on the PASSWORD_LIFE_TIME parameter in Oracle profiles. Once expired, the user cannot log in until the password is reset.

Error Message

ORA-28001: the password has expired

Quick Solution

Quick Fix: Reset the password using the ALTER USER command and log in again.

ALTER USER username IDENTIFIED BY new_password;

Why Does ORA-28001 Occur?

• Password lifetime exceeded
• Default profile settings
• Security policies enforcing password expiry
• Inactive user accounts

Step-by-Step Solutions

1. Reset User Password

This is the quickest way to resolve the issue.

ALTER USER username IDENTIFIED BY new_password;

2. Change Password After Login

If prompted during login, change password:

sqlplus username/old_password

3. Check User Profile

SELECT username, profile FROM dba_users;

4. Modify Profile Settings

To extend password lifetime:

ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME 90;

5. Disable Password Expiry (Optional)

ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED;

Note: Use carefully due to security risks.

Real-World Scenario

A DBA was unable to log in due to ORA-28001. The issue occurred because the default profile had a password lifetime of 30 days. After resetting the password and increasing the limit, the problem was resolved.

Common Mistakes

• Ignoring password expiry policies
• Not checking profile settings
• Using expired credentials repeatedly

Best Practices

• Monitor password expiry regularly
• Set appropriate password lifetime
• Use secure password policies
• Notify users before expiry

How to Prevent ORA-28001 Error?

1. Set longer password lifetime
2. Use automated alerts
3. Implement password management policies

Image: Password Expiry Example

Frequently Asked Questions

What causes ORA-28001?
It is caused by password expiration based on profile settings.

How do I fix ORA-28001?
Reset the password using ALTER USER command.

Can I disable password expiry?
Yes, by setting PASSWORD_LIFE_TIME to UNLIMITED.

Related Posts

• ORA-01017 Invalid Username Password – Fix
• ORA-01194 Recovery Error – Solution
• ORA-01555 Snapshot Too Old – Fix

👉 Check our complete guide: Oracle Error Codes Guide

Conclusion

The ORA-28001 error is a simple but important security-related issue. By resetting the password and properly managing profile settings, you can quickly resolve and prevent this error.

Always maintain a balance between security and usability when configuring password policies.