Maybe but I disagree with this idea. I use the same password for all my accounts in everything. If you find out mine in a forum, you can accede to my e-mail accounts, my memberships in all other forums and sites, etc. It might be the same for him/her. So yeah, I think you better change his or her password and e-mail it to him/her!