How should I respond to an unrequested Facbook recovery code followed by an unexpected logout from the associated email account? [closed]
Cybersecurity layperson here.
I recently got an email from Facebook giving me an account recovery code that I didn't request. I assume this means that someone else did request it, either because they have a similar Facebook login to me and got confused, or because they're trying to maliciously access my FB account.
Not long after, I went to access the email account associated with that FB account, and found I had been logged out, which is unusual on this device. I suspect the same actor tried to access the email account in order to access the FB recovery code.
Fortunately I have TFA for both accounts. Is it safe for me to log in to either or both accounts, and do I need to take any further action? The recovery code request suggests the intruder doesn't have my FB password.
