[xiphias2]

If he uses a Trezor for exampe, it uses PBKDF2 with SHA256 which is very easy to crack with a GPU if the password is not that long.