Old phone accessing my account

Last year I had a massive stroke. Relatives came to stay with me. They asked for my old iPhones, and I gave them to them without erasing them. The relatives had access to everything because of the stored passwords. I have just changed my iCloud password again because I received another message that a new iPhone was using my I’d and phone number.

What else can I do to keep them out of my account?