ATTENTION!

While on FB, look at your URL address (the very top box on your screen.) If you see "http:" instead of "https:" then you DO NOT have a secure session & can be HACKED. Go to Account - Account Settings - Account Security - click Change. Check box (secure browsing), click Save. Now you will see https which is secure.  (FB has automatically sets it on the non-secure setting, so don't think you are safe if you do not follow these steps..  Do your friends a huge favor, and send this info on to them via email or copy & re-post to your Facebook status.)