[megamark16]

If they had guessed his password then their login would have shown up in the activity logs for his account, which he indicated was not the case.