Someone posted stories on my account — I think I've been hacked
A user woke up to find someone else posting stories on their account and realized it had been compromised. The recovery order that matters most is: change the password, revoke unrecognized sessions, enable two-factor authentication, then remove suspicious connected apps and the posts you did not make. Speed matters most when an attacker may also change recovery details.