Either the user is using an old password or they are locked out and cannot set a new password.
If the user is locked out, have the customer wait the lock out time or unlock the user and have them set a new password. The password they set when they got this error will not be available to use.