Comment by Cacti

You’re making an assumption, that it was weak. What we know is that they found the password on his phone. It could have been quite strong.