Many people have had their Facebook website hacked and a fake profile created which then sends out friend requests to your Facebook friends. Within Facebook , navigate to Settings and Privacy, and then click on Security and Login. On the right hand panel, scroll down to the section on Two-Factor Authentication. Here you can choose to use the authentication app or get a SMS 6 digit code sent to your mobile number when an attempt is made to login to your account from an unrecognized device. Add one of these options to better secure your account.