Eric Zeidan

Generate an extra variable to protect and bypass access to wp-admin or wp-login with a simple extra variable that you may set in the admin page.
Major features in secure_uradmin include:
<ul>
<li>You can enable really easy with a on / off button</li>
<li>You can set the name of your Variable</li>
<li>You can set the name of your hash</li>
<li>Your hash will be saved using wp_hash_password 16 round encryption</li>
</ul>
P.D.: After you enable and set the varname & hash you will need to add them to your wp-admin login url; wp-admin?yourvarname=yourhash

Secure Your Admin

Generate an extra variable to secure your wp-admin access thru a simple variable name & hash passed in the URL

Yeora

The “MB Challenge response authentication” plugin extends the 
default WordPress authentication with a challenge response authentication. 
This ensures that passwords during login are no longer stored in the 
clear text during the login process.
Via a menu item in the administration you can also set whether the challenge response authentication should be enforced or not. If challenge response authentication is not enforced 
the default WordPress authentication is allowed as fallback. 
This is the case if a user cannot hash on the client side.
Furthermore, the default WordPress hasher is overridden and PHP native functions like password_hash and password_verify are used.
<h3>Credits</h3>
Special thanks to the developers of the 
bcrypt.js library https://github.com/dcodeIO/bcrypt.js. 
The library is used for client-side hashing.

MB Challenge response authentication

This plugin implements challenge response authentication. In addition, the WordPress hasher is replaced by native PHP libraries.

Secure Your Admin vs MB Challenge response authentication