isaacchapman

The Htaccess Secure Files plugin can only be activated on Apache web servers with mod_rewrite enabled, and will automatically raise an error upon activation if this is not the case.
The Htaccess Secure Files plugin allows for setting files to be accessible only to visitors who have a specified IP address or <a title="WordPress role or capbility" href="https://codex.wordpress.org/Roles_and_Capabilities" rel="nofollow ugc">WordPress role or capability</a>. By using <a title=".htaccess files" href="http://en.wikipedia.org/wiki/Htaccess" rel="nofollow ugc">.htaccess files</a> to secure the content instead of a separate directory outside the web root, WordPress’s native media library functionality can be used to upload secure files and link to them from within the visual editor.
By default all built-in WordPress roles will be allowed to access content that is marked as secure. The Settings -> Secure Files admin screen controls which roles, capabilities, and IP addresses are allowed to view or download secured files. If a custom role or capability is desired, there are several <a title="WordPress plugins" href="https://wordpress.org/extend/plugins/search.php?q=roles+capabilities" rel="ugc">WordPress plugins</a> capable of creating and editing roles and capabilities.
Any visitor that matches any selected role, capability, or IP address will be allowed to access secured files.
This plugin works by creating a .htaccess files in the directory of each secured file. If you manually edit the .htaccess file and it becomes corrupt (a 500 Internal Server Error is the most likely symptom), I recommend deleting the .htaccess file and then edit and save each secured item in the media library.

Htaccess Secure Files

Allows securing files in WP's media library to be only accessible to users with specific roles, capabilities, or IP addresses.

parswp

<h4>A must have plugin for wordpress blogs</h4>
By using Hide Login+ you can simply change most important URLs that are being accessed every day, keeping them safe and secret.
For those upgrading from previous version: please check installation steps
New features:
<ul>
<li>No need to modify <code>wp-config.php</code> any more (see installation steps)</li>
<li><code>.htaccess</code> backup file is created before changes take effect (named <code>.htaccess.backup</code>)</li>
<li>Recoded to be latest WordPress version compatible</li>
</ul>
Benefits:
<ul>
<li>Have secured and hidden login page</li>
<li>Customized URLs for the most important parts of your WordPress installation</li>
<li>Control access over <code>wp-login.php</code> and <code>wp-admin</code> pages</li>
<li>Easy back-to-defaults ability without frustration</li>
</ul>
Features:
<ul>
<li>Define custom URL slug for login, logout, registration, lost password & admin pages</li>
<li>Able to prevent access to <code>wp-login.php</code> and <code>wp-admin</code> directly</li>
<li>See your <code>.htaccess</code> content after changes have been successfully updated.</li>
<li>
Revert to default configurations on plugin deactivation (or easily via a second method)
This won’t secure your website perfectly, but if someone does manage to crack your password, it can make it difficult for them to find where to actually login. This also prevents any bots that are used for malicious intents from accessing your <code>wp-login.php</code> file and attempting to break in.
</li>
</ul>

Hide Login+

Have a secure login and admin page. Allows you to create custom URLs for user's Log in, Log out, Sign up and Admin page.

Htaccess Secure Files vs Hide Login+