Shoutbox

The only option now is to e-mail Microsoft Passport support with as much info as you (sensibly) can to prove that your friend is who she says she is, and hope MS believe her and reset her password.

Then tell her to keep her password secret, and make it hard to guess. Ideally, a password should be between 6 and 123 characters long, and include characters from at least three of the following categories:
- Uppercase letters
- Lowercase letters
- Numbers
- Punctuation