Oracle Applications system should be shut down before changing any schema passwords. Also FND_USER and FND_ORACLE_USERID tables should be backed up before changing any passwords.
FNDCPASS <apps username>/<apps password> 0 Y <system username>/<system password> <token> <username> <new_password>
=>The SYSTEM token is used when changing the APPLSYS password.
=>The ORACLE token is used when changing a Single Applications schema password.
=>The ALLORACLE token is used when changing All Applications schema passwords.
=>The USER token is used when changing an Applications User password.
Following are the different usage of FNDCPASS utility
1. Change Apps and Applsys schema password
Token=SYSTEM
FNDCPASS apps/<APPS password> 0 Y system/<SYSTEM password> SYSTEM APPLSYS <new_password>
2. Change an Oracle Registered Application schema password (Other than Apps and Applsys)
Token=ORACLE
FNDCPASS apps/<APPS password> 0 Y system/<SYSTEM password> ORACLE GL <new_password>
3. Change All Oracle Registered Application schema password (Other than Apps and Applsys)
Token=ALLORACLE
FNDCPASS apps/<APPS password> 0 Y system/<SYSTEM password> ALLORACLE <new_password>
4. Change an All Oracle Applications user password
Token=USER
FNDCPASS apps/<APPS password> 0 Y system/<SYSTEM password> USER SYSADMIN <new_password>
Reference
How to Change Applications Passwords using Applications Schema Password Change Utility (FNDCPASS or AFPASSWD) (Doc ID 437260.1)