I am using an Apple iCloud account that was created for me by a friend. I have a suspicion that my friend is now accessing my photos and videos through this account.

When we created the account, we used his email address for the account's rescue email address. According to Apple:

> Rescue Email Address
> 
> Give us a rescue email address where we can send you a link to confirm
> your identity and let you reset your information should any security
> issues arise. This address is only for communicating information about
> your security details. We won’t send any other types of messages to
> this address.

I have changed my password many times but I believe, because of the above, he can still access the account through the rescue email address we used when we created the account.

Can you please tell me, if I changed my password, can he can find the password out using the rescue email address or not?