recently I have create a wallet on blockchain.com.
after creation, I have given my wallet ID and password to my friend located in USA to check if everything is ok.
after he check for me, I have change my password and enable 2FA and backup phase which consist of the 12 words.
my question is, will he able to log in my account even after I have make the above changes?
This is not recommended. You should NEVER give anyone access to your coins.
Your friend could have also exported the backup phrase (the 12 word mnemonic seed).
This seed is everything one needs to access the coins.
I'd recommend to create a new wallet immediately !
If you insist on using an online wallet, create a new one and send your funds over.
If you don't explicitely want to use an online wallet, get a desktop wallet (e.g.
electrum). Those are more secure and safer.
But you definitely shouldn't be keeping any coins inside of this wallet anymore.