If this is not a joke....
Did your friend use Passwordmaker (PWM) to set his password? If so, he will need to use PWM with the same settings/ account info in order to generate the correct password.
If not, I'm not sure what we can do to help...
One thing... you should always use an email address that you will always have access to as the 'secondary email address' that virtually all sites use in order to reset a password... has he tried to do that?
Otherwise, we will need more information before we can try to help...