Facebook sends password reset codes and links upon users' requests. If you didn't request a password reset code, but you've received one, there's a high chance that it's a fake one with malicious software in it.