If you have your friend call Square, they can remove the security token from his account which will allow you to log into it for him. I had to do this because my token was malfunctioning and not letting me access my account at all.