they should speak to an adult

they should report it to the police

they sould be a password easy to remember if you kwow it but hard to guess for other people. It should have few numbers and capital letters to make it quite hard.