how is my friend doing it?

I'm using moto x 2nd gen, I recently installed applock to keep some apps private but one of my friend knows a way to bypass the password and even change it, he did the same even with pattern lock. He doesn't even reboot the phone, he does it in seconds. How is he doing it and in what other ways can I lock my apps?