1. If you keylogged or RATed them, get on their email, and get ready to receive the code.
2. Change the Security Question first.
3. Change the email with the code.
4. Change the password.
5. Steal the email account so they cant receive any emails from Steam.
Educational purposes only. I'm not responsible for anything you do.