Changeable password lock system

What steps would one take to replicate the error?