Eric Mann

Rather than sending usernames and passwords in plain text with every request, we’re going to use a set of public/secret keys to hash data and authenticate instead.
On your WordPress profile, you will see a new “Remote Publishing Permissions” section listing out the applications that have permission to publish, along with their public and secret keys.
New applications can be added whenever you want. You can also change the names of applications, or revoke publishing permission by deleting them.
<h3>Additional Information</h3>
Lock graphic designed by Scott Lewis from the thenounproject.com

Secure XML-RPC

More secure wrapper for the WordPress XML-RPC interface.

Jonny Harris

Simple plugin that disables XML-RPC, since it is enabled by default on WordPress 3.5 and above. It also removed references in the headers and in the body of the html.
If you wish to follow the development of this plugin, view the code on the official plugin <a href="http://www.jonathandavidharris.co.uk/scripts/disable-xml-rpc-fully/" title="website" rel="nofollow ugc">website</a> or follow me on twitter <a href="https://twitter.com/thespacedmonkey" rel="nofollow ugc">@thespacedmonkey</a>

Secure XML-RPC vs Disable XML RPC Fully