Passkey didn’t work!

If someone is signing into your account from a different device. The passkey option is not what you want. That's for the console itself. You want to set up additional security settings for the account itself. Like 2 step verification

Changing the password on the account should require him to have to reenter a password next time he tries to sign into your account.

The passkey does go across other consoles but it can be reset by entering the same combination 3 times and then entering your password to erase the passkey.

You will have to change your password and then set the passkey after the new password is set if your friend knows the password.

http://support.xbox.com/my-account/microsoft-account/change-microsoft-account-password

If he keeps getting after that in he may have added an email to your account to help reset the password to get access unauthorized. If that's so, please see this page about a compromised account:

https://support.xbox.com/my-account/security/compromised-account-solution

Also, make sure you selected the option to ask for a passkey at login:
https://support.xbox.com/my-account/security/create-xbox-one-passkey

And please consider adding 2-step verification to your account to prevent your friend from getting on your account again, even if he knows the password:

https://support.microsoft.com/help/12408/microsoft-account-about-two-step-verification

What Passkey option did you set? If you set a custom sign-in option that included "Don't ask, just sign me in; Ask for passkey for: Purchases, Changing my settings" then that may be how your friend can still log into your account without the passkey. Alternatively,
maybe you set a Passkey that is too short or easy (eg mine is a 6 button combination) or your friend saw you use it.

Hey Robman098,

It sounds like your friend has access to your password and email. He is able to change anything.

So, you will need to take immediate action and change the details of your account. Things such as:

• The Email you use to log in
• Your password

Additionally, for more protection, you should enable 2-Step verification. This adds a layer of protection by requiring a secondary means of confirmation for login in such as a code sent by phone or email or the authenticator app. Feel free to contact Xbox
Support and let them know about your situation, they will gladly help you secure your account!

Compromised Account Solutions: https://support.xbox.com/en-US/my-account/security/compromised-account-solution

2 Step verification: https://support.microsoft.com/en-us/help/12408/microsoft-account-how-to-use-two-step-verification

After you have done this, you can begin setting up a new passkey. Lastly, please no matter what, give out your account information to someone else!

Best,

Nozzle