They can but I believe they always remain linked. I'm on my third one but I can login with any of the past ones. I guess they'd somehow have to create a new one and somehow move all the rest over manually?

But it sounds like this person knows the OP well enough that they could just call in and say they forgot it.