Ask your friend for his mobile number, so you can continue to activate the account. You'll need it anyway, see below.
Remember to Enable 2-step verification. This will help prevent the account from being compromised in the future, if his password is ever stolen:
With 2-step authentication : Facebook > Login + Password > Verification by SMS/TXT > Access = Success
Without 2-step authentication : Facebook > Stolen Login + Password > Access = Compromised
Hope this helps a bit more.