Smart way to bypass direct WP login

I’m an IT guy. I installed this plugin and tested iｔ. I concluded　it’s very safe. Ｉ no longer need to enter username/password in my none SSL wp-login that prevents password sniffing from hackers. I directed the login email sent to [email protected], so the email never left my server that makes it even more secure. It only takes couple seconds to receive login email. Further, I　password protected \wp-admin，so　Ｉ will need to enter that password to get into wordpress area. What a double protection. Since I don’t have to enter wp-admin password anymore, so I changed the account password to a new one-hundred-character password. No body can break it. I’ve never use the new password, so no hacker ever had chance to sniff on it. A well-thought-out plugin. You should try it.