A very good guide to lock down FB - https://heimdalsecurity.com/blog/facebook-security-privacy-guide/