If your friend doesn't know the passphrase, then it's a terrible recommendation to use iancoleman. They need to use some sort of brute force tool if their password wasn't long enough or/and didn't use any special characters. They do know a part of it, right?

Check btcrecover. It's a tool made for these occations.