He said he doesn't remember setting a passphrase. I checked and the BTC have not been spent yet. Is it possible to bypass the password somehow?
It depends on how long the characters are. The longer it is, the hard to brute force the passphrase. You can use BTCRecover for it.
https://btcrecover.readthedocs.io/en/latest/