How to update your Facebook security settings
While on Facebook, look at the URL in your browser; if you see http: instead of https: then you don’t have a secure session.
Go to Account » Account Settings » Account Security and click Change. At least check the first setting, since the default is non-secure. Also, you can check the second box to be sent a notification when any other computer or device accesses your account.
