Friend has a stalker. Help with computer security?

This guy has average computer skills. She is worried though that he will find out where she is by getting into her facebook or regular email or will somehow figure out a way to intercept her IMs. I told her that he shouldn't be able to so long as she has a decent pword and has facebook set to private and doesn't friend anyone she doesn't know or who leak info to him. Am I right or am I leading her astray? She already has a protection order.