email get hacked, how to stop?

My yahoo email account was broken into by a guy in my lab and he is playing tricks withm e. I do not know how he can steal my password and uses my friend address to reply to me. Anyone has the answer or similar experience? Thanks