Kung may access ka sa gmail account niya at nka link yun sa facebook niya... Considered häçked na yun. Forget password mo lng tapos send code sa gmail. Kung gusto mo "medyo" sneaky, yung d niya alam naaccess yung fb niya, just skip changing the password.