In addition to the other suggestions, any option they choose which involves a password needs to be a secure password. Birthdates, pet names, dictionary words are useless. They need to get a strong password. A
minimum of ten characters long (more is better) using mixed case letters, numbers, and punctuation. Absolutely no names, partial names, nor any word which appears in the dictionary.
Under no circumstances should this password be written down and placed near the computer! This "kid" sounds pretty sneaky, if they write down the password, he'll find it.
If they can't think of a good password on their own, go
here and get a "random" one-time-use password.