Enrico Rossomando

Whenever you try to login into your website, you can use this plugin to trasmit your password encrypted. The encryption process is done by the Chap protocol; this is particularly useful when you can’t use ssl or other kinds of secure protocols. By activating the ChapSecureLogin plugin, the only information transmitted unencrypted is the username; password is hided with a random number (nonce) generated by the session – and opportunely transformed by the SHA-256 algorithm. 
In the first login there will be an error, but don’t worry is only a tecnical error. Indeed in the next login’s operation, if the values are correct, there will not be errors, but you give mind because the password will sended in unencrypted way. 
If you want more details about this algorithm, check <a href="http://www.devarticles.com/c/a/JavaScript/Building-a-CHAP-Login-System-An-ObjectOriented-Approach/" rel="nofollow ugc">“Building a CHAP Login System”</a>. 
This is a zero-configuration plugin.
Enrico Rossomando (redsend) this is my blog about programming, gaming and startup > <a href="https://www.mrred.it/" title="Blog about programming, gaming and startup" rel="nofollow ugc">https://www.mrred.it</a>

Chap Secure Password Login

Do not show password, during login, on an insecure channel (without SSL). Use a SHA-256 hash algorithm.

Amy Green

Login errors in WordPress can be used by hackers to guess whether they entered wrong username or password.
This is a lightweight plugin that will hide those login errors and make your WordPress login more secure.
Features: 
* No annoying settings to deal with. 
* Install and automatically hide login errors. 
* Lightweight with only a few lines of code.

Hide Login Errors

Login errors in WordPress can be used by hackers to guess whether they entered wrong username or password.

Chap Secure Password Login vs Hide Login Errors