WordPress. What folders to password protect from users?

Question

User identification

In order to protect against any unscrupulous people, I put http authorization on the wp-admin and wp-includes folder. What other folders should be authorized, given that only I will publish articles (i.e. the rest will be readers, comments will be through cackle or something similar)?

Answer 1

In my opinion, it's enough to put wp-admin on and that's it.
Here is primus-it.ru/wordpress/protection/2010/11/it-37.html

Answer 2

Hosters somehow closed access to /wp-admin/ and /wp-login.php at the htaccess level due to the brute force act, which apparently created a load on the hosting. Allowing access only to the specified explicit .htaccess IP. If your IP is white, then you can do the same for yourself.