# I think someone just tried to hack my Facebook account **URL:** \ **Category:** Miscellaneous and Personal Stuff I Must Share\ **Created:** [June 27, 2017, 5:27pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000 "2017-06-27T17:27:20Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\ **Post date:** [June 27, 2017, 5:27pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/1 "2017-06-27T17:27:20Z")
I just received the following email from Facebook. > [@](#): > > It looks like someone tried to log into your account on June 27 at 1:04pm using an unknown device. Your account is safe; we just wanted to make sure it was you who tried to log in from somewhere new. Apparently from an iPhone. I don’t own an iPhone. It wasn’t me who attempted the login. I changed my password, as prompted by Facebook, but who the hell is trying to access my Facebook account. Has anyone else experienced this? ---
**Author:** ![Rysto](https://avatars.discourse-cdn.com/v4/letter/r/ecccb3/32.png) [@Rysto](https://boards.straightdope.com/u/Rysto)\ **Post date:** [June 27, 2017, 5:36pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/2 "2017-06-27T17:36:50Z")
How did you change the password? Did you follow a link in the email, or did you type [facebook.com](http://facebook.com) in the webbrowser your self? If you followed a link, go back and check that the link actually went to facebook and it wasn’t a phishing attempt. ---
**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\ **Post date:** [June 27, 2017, 5:42pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/3 "2017-06-27T17:42:37Z")
> [@Rysto](#): > > How did you change the password? Did you follow a link in the email, or did you type [facebook.com](http://facebook.com) in the webbrowser your self? If you followed a link, go back and check that the link actually went to facebook and it wasn’t a phishing attempt. No phishing. It was a link on a Facebook lockout screen. I was logged in and it popped up with that screen. I followed the FB instructions, end even got an email response after changing my PW. Someone legitimately tried to log into my account through an iPhone. WTF? I’m NOT that popular on Facebook. Or anywhere, really. Sent from my XT1635-02 using Tapatalk ---
**Author:** ![jz78817](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jz78817/32/1028_2.png) [@jz78817](https://boards.straightdope.com/u/jz78817)\ **Post date:** [June 27, 2017, 5:42pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/4 "2017-06-27T17:42:49Z")
anything critical to me (banking, email, etc) these days I religiously use 2-factor authentication (2FA.) a few things I can use an authenticator app to generate a code. others I have text me with a code. ---
**Author:** ![Duckster](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/duckster/32/1244_2.png) [@Duckster](https://boards.straightdope.com/u/Duckster)\ **Post date:** [June 27, 2017, 6:31pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/5 "2017-06-27T18:31:34Z")
Do you have a simple password, or a complex one? Have you ever logged in from any device you do not personally own and control 100 percent of the time? ---
**Author:** ![Gatopescado](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/gatopescado/32/5711_2.png) [@Gatopescado](https://boards.straightdope.com/u/Gatopescado)\ **Post date:** [June 27, 2017, 6:33pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/6 "2017-06-27T18:33:50Z")
It’s that damn co-worker, out to get you! 😃 ---
**Author:** ![control-z](https://avatars.discourse-cdn.com/v4/letter/c/eada6e/32.png) [@control-z](https://boards.straightdope.com/u/control-z)\ **Post date:** [June 27, 2017, 6:36pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/7 "2017-06-27T18:36:08Z")
Really the most simple explanation is someone with a similar email address to yours mistyped it when trying to log into Facebook on their phone. ---
**Author:** ![Procrustus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/procrustus/32/2994_2.png) [@Procrustus](https://boards.straightdope.com/u/Procrustus)\ **Post date:** [June 27, 2017, 6:36pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/8 "2017-06-27T18:36:10Z")
> [@Duckster](#): > > Do you have a simple password, or a complex one? Have you ever logged in from any device you do not personally own and control 100 percent of the time? No one got in. Just tired to. So, whatever type of password he has was apparently sufficient. ---
**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\ **Post date:** [June 27, 2017, 6:42pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/9 "2017-06-27T18:42:59Z")
> [@Duckster](#): > > Do you have a simple password, or a complex one? Have you ever logged in from any device you do not personally own and control 100 percent of the time? > [@Procrustus](#): > > No one got in. Just tired to. So, whatever type of password he has was apparently sufficient. Pretty much this. I have never logged in on anyone elses device. I changed the PW to a more secure one, that is nothing like my other ones. I was just curious if this had happened to anyone else, maybe as a FB security measure or something? I’ve been on there for 10 years and have never gotten a message like that previously. Oh well. ---
**Author:** ![HeXen](https://avatars.discourse-cdn.com/v4/letter/h/c89c15/32.png) [@HeXen](https://boards.straightdope.com/u/HeXen)\ **Post date:** [June 27, 2017, 6:45pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/10 "2017-06-27T18:45:59Z")
Spammers most likely. I’m sure there’s some reason why a Spammer would want FB accounts. I had my Gmail account hacked 3 times despite using long alpha numerics but only 1 spam email got sent out before Google blocked it. After the 3rd time I lost the account because I could not satisfy Google’s verifications of who I was, I couldn’t remember when I created the mail account so they wouldn’t let me back in. Now they use your phone to verify so it’s not as big of a deal as it was then. The thing about passwords is, is that they are totally useless since most hackers go for the servers, steal accounts and then sell them. So passwords do little more than just keep out the average joe. I even had to freeze my credit because my insurance companies server had all the accounts stolen which included our social security numbers…securities a joke these days. ---
**Author:** ![Shalmanese](https://avatars.discourse-cdn.com/v4/letter/s/45deac/32.png) [@Shalmanese](https://boards.straightdope.com/u/Shalmanese)\ **Post date:** [June 27, 2017, 7:01pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/11 "2017-06-27T19:01:01Z")
Check on [Have I been pwned](https://haveibeenpwned.com/) to see if your credentials have been leaked in any database breaches. It’s quite common for thieves to steal credentials from one site and then test them against other sites in case there’s password reuse. If you use your FB password as any other password, it would probably be a good idea to rotate all of those passwords too as not all companies are as vigilant as FB on security. ---
**Author:** ![Sunny\_Daze](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/sunny_daze/32/438_2.png) [@Sunny\_Daze](https://boards.straightdope.com/u/Sunny_Daze)\ **Post date:** [June 27, 2017, 7:34pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/12 "2017-06-27T19:34:44Z")
> [@Shalmanese](#): > > Check on [Have I been pwned](https://haveibeenpwned.com/) to see if your credentials have been leaked in any database breaches. Interesting website and oh hell, got some work to do. ---
**Author:** ![steatopygia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steatopygia/32/3132_2.png) [@steatopygia](https://boards.straightdope.com/u/steatopygia)\ **Post date:** [June 27, 2017, 9:39pm UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/13 "2017-06-27T21:39:57Z")
My wife’s Facebook account was hacked. I’m not sure what the purpose was. She is convinced it was because she joined Indivisible. She changed her password and also put a generic cover photo up. The photo change was recommended by somebody?, not sure why. No problems since. And I am clean on the pwned site. Ladies?😃 ---
**Author:** ![digs](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/digs/32/14889_2.png) [@digs](https://boards.straightdope.com/u/digs)\ **Post date:** [June 28, 2017, 12:56am UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/14 "2017-06-28T00:56:14Z")
> [@steatopygia](#): > > And I am clean on the pwned site. Ladies?😃 Gracious lawdy-pie, ah _does_ love me a man with a vigorous password\*!\* ---
**Author:** ![Defensive\_Indifference](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/defensive_indifference/32/6502_2.png) [@Defensive\_Indifference](https://boards.straightdope.com/u/Defensive_Indifference)\ **Post date:** [June 28, 2017, 1:46am UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/15 "2017-06-28T01:46:59Z")
> [@control-z](#): > > Really the most simple explanation is someone with a similar email address to yours mistyped it when trying to log into Facebook on their phone. This is my guess too. Yeah, it could be something more nefarious, but hoofbeats, horses, all that. ---
**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\ **Post date:** [June 28, 2017, 2:07am UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/16 "2017-06-28T02:07:37Z")
Epiphany time. Huge epiphany. A couple of hours after that failed login attempt I got a message from work saying my security clearance was being reviewed and they need to talk to me. Sent from my XT1635-02 using Tapatalk ---
**Author:** ![Buttercup\_Smith](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/buttercup_smith/32/473_2.png) [@Buttercup\_Smith](https://boards.straightdope.com/u/Buttercup_Smith)\ **Post date:** [June 28, 2017, 2:13am UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/17 "2017-06-28T02:13:50Z")
**Good Luck Leaffan** I was clean on that site too. ---
**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\ **Post date:** [June 28, 2017, 2:20am UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/18 "2017-06-28T02:20:31Z")
> [@Buttercup\_Smith](#): > > **Good Luck Leaffan** > > I was clean on that site too. I didn’t enter my email address there; I didn’t feel comfortable doing so. Sent from my XT1635-02 using Tapatalk ---
**Author:** ![Idle\_Thoughts](https://avatars.discourse-cdn.com/v4/letter/i/838e76/32.png) [@Idle\_Thoughts](https://boards.straightdope.com/u/Idle_Thoughts)\ **Post date:** [June 28, 2017, 2:26am UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/19 "2017-06-28T02:26:29Z")
If you don’t enter an email and you lose your account or forget your password or someone is successful at hacking it, you can pretty much consider it lost for good. It’s your choice obviously, but I can say I’ve had my FB connected to my primary email for about nine years now with no problem. They don’t add or sell your email with third parties, as far as I know…or–if they do–it’s with parties who haven’t ever contacted me by email, at least. But if you don’t mind having to make a new FB and readd everyone if you ever lose it, well, that’s fine. ---
**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\ **Post date:** [June 28, 2017, 2:30am UTC](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000/20 "2017-06-28T02:30:26Z")
> [@Idle\_Thoughts](#): > > If you don’t enter an email and you lose your account or forget your password or someone is successful at hacking it, you can pretty much consider it lost for good. It’s your choice obviously, but I can say I’ve had my FB connected to my primary email for about nine years now with no problem. They don’t add or sell your email with third parties, as far as I know…or–if they do–it’s with parties who haven’t ever contacted me by email, at least. > > But if you don’t mind having to make a new FB and readd everyone if you ever lose it, well, that’s fine. No, I didn’t enter my address into the “Have I Been Pwned” site. My FB account is cool. Sent from my XT1635-02 using Tapatalk [Next page](https://boards.straightdope.com/t/i-think-someone-just-tried-to-hack-my-facebook-account/790000.md?page=2)