Comment WPA2 not an option (Score 2) 884
Those of you recommending a long randomly generated WPA2 password need to RTFA. He has been hacked via the WPS vulnerability. Once you have obtained the WPS pin you have permanent access into that router and have the ability to retrieve the WPA2 password in plaintext every time that he changes it. The pin cannot be changed. Depending on the router you may or may not be able to disable WPS. Next time buy a router that has the option to disable WPS and TURN IT OFF. Over 12 million routers are now exploitable via this hack and have been for quite some time. The exparrot option or sniffing his traffic are the best options.