The user didnt use a passphrase, if he did, do you think it would have help prevent this?