The fix wordpress malware Codex has an outline of what permissions are acceptable. Directory and file permissions can be changed through an FTP client or within the Website page from your web host.
A simple way to maintain WordPress safe would be to use a few built-in tools. First of all, do not allow people to list the files run a web host security scan and automatically backup your web hosting account.
While it's an odd term, it represents a task that is essential : making a WordPress backup of your website to work on offline, or in case something should go amiss. We are not simply being obsessive-compulsive here: servers go down every day, despite their promises of 99.9% uptime, read review and if you've had this happen to you, you know the fear is it can cause.
Make a note of your password! I suggest the paid or free version of the software that is protected *Roboform* to remember your passwords.
Free software: If you have installed scripts that are free like Wordpress, search Google for'wordpress security'. You will get tips on the best way best to create your WP blog protected.