I dunno. Here's the specs of their basic drive. https://www.ironkey.com/en-US/encrypted-storage-drives/250-basic.html https://www.ironkey.com/en-US/website/certification-and-compliance.html Maybe you can figure it out, give him a call to try to help him retrieve his password for a small payment of, say, 3500 BTC once successful?
I just write down my passwords for important things, just in case. It seems like the logical thing to do.