Everyone has been using the same login to her site, for two years. The fact you still can access her site with it, doesn't set off the bullshit detectors?
Yeah. I got mine from Felix to use for a month, then years later, someone offered me theirs--same one! Tried it again when all this broke--still works (to the old-style pages).
If there are or will be new content pages they should only be accessible by new passwords. The pages will be built before they're published, so they're probably on the server in some form already--if they exist.