WordPress settings for security

Hi all: I have installed WordPress and it now works (and I love it!). Now, I need to secure the site. In order to change permalinks and edit the theme, I had to make pretty much all file attributes on 777 in my FTP client. I understand that I should not leave them this way. Can someone point me to a doc or explain which settings should apply to which folders to secure wordpress?

I will also set the security keys, in addition. Thanks in advance.

Nick