I was referring to generating signed message online with the help of private keys generated from
https://iancoleman.io/bip39/, which doesn't seems to be a safe method due to the requirement of putting your private keys online.
I now Understood what you were saying... In that case he should use electrum to sign the message.