Found a good page for Facebook security (https://www.facebook.com/security/app_268616169836752) The PDF here is a great resource for people who want to know how to lock down their FB accounts.
The one thing I would recommend that I don't see in the PDF document is their 2-factor authentication (Login Approvals) which will send users a code to their phone to enter in addition to the normal log in process.
To enable Facebook Login Approvals...
1. Log into Facebook
2. Go to Account Settings
3. Open Security Settings
4. From here you can enable Login Approvals
5. You will be prompted to re-enter your password
6. Enter your mobile phone number you wish to receive text messages on
7. You will then receive and enter the confirmation code you received on your phone.
8. You are now setup with Login Approval
9. At this point you can setup your mobile application as a code generator.
10. Enjoy a little peace of mind.
If you are seeking more peace of mind try enabling Secure Browsing, Security Browsing, and/or Login Notifications. As always think before you click and be careful.
Top Tips for Staying Secure on Facebook
• Only Friend people you know.
• Create a good password and use it only for Facebook.
• Don’t share your password.
• Change your password on a regular basis.
• Share your personal information only with people and companies that need it.
• Log into Facebook only ONCE each session. If it looks like Facebook is asking you to log in a second time, skip the links and
directly type www.facebook.com into your browser address bar.
• Use a one-time password when using someone else’s computer.
• Log out of Facebook after using someone else’s computer.
• Use secure browsing whenever possible.
• Only download Apps from sites you trust.
• Keep your anti-virus software updated.
• Keep your browser and other applications up to date.
• Don’t paste script (code) in your browser address bar.
• Use browser add-ons like Web of Trust and Firefox’s NoScript to keep your account from being hijacked.
• Beware of “goofy” posts from anyone—even Friends. If it looks like something your Friend wouldn’t post, don’t click on it.
• Scammers might hack your Friends’ accounts and send links from their accounts. Beware of enticing links coming from your Friends.
Remember to STOP | THINK | CONNECT!