This does not only fall into the forgotten username or password category but also phishing problems which every major web service has to cope with.
If you didn't set up Trusted Contacts, you might be given the option to answer one of your security questions and reset your password on the spot.
Moreover, the Facebook mobile app includes a Code Generator that automatically generates a fresh security code every 30 or 60 seconds.