Please post any future BPS Pro questions in the BPS Pro Forum website here: https://forum.ait-pro.com/
Hackers target the /wp-content/plugins folder and the /wp-content/uploads folder and do not target the wp-content folder itself in general.
BPS Pro has the Plugin Firewall, which creates a true Firewall for the /wp-content/plugins folder. BPS Pro stores autorestore, quarantine and other sensitive files in this deny all .htaccess protected folder – /wp-content/bps-backup. The /wp-content/uploads folder is protected by the BPS Pro Uploads Anti-Exploit Guard.
Password protecting the wp-admin folder is really not necessary. The primary reason for this is that the wp-admin folder already has password protection. When you login to your WordPress website you are authenticating/logging into the wp-admin folder area/WP Dashboard.
If you would still like to add an additional login to your wp-admin folder then this means that visitors to your website will not be able to register to your website unless you give them the Directory Protection username and password for your wp-admin folder.
wp-admin Directory Password Protection Steps
1. Go to BPS Pro B-Core Security Modes page, click on the Delete wp-admin htaccess File radio button and click the Activate button to delete the wp-admin .htaccess file.
2. In cPanel – setup Directory Password Protection for the wp-admin folder.
3. Go to the BPS Pro B-Core Edit/Upload/Download tab page, click on “Your Current wp-admin htaccess File” tab, copy all of the .htaccess code in the window and go to the BPS Pro Custom Code tab page. Paste your cPanel Directory Password Protection .htaccess code to wp-admin htaccess File Custom Code – CUSTOM CODE WPADMIN TOP: Add miscellaneous custom code here text box and click the Save wp-admin Custom Code button.
4. Go to B-Core Security Modes page and activate wp-admin BulletProof Mode again.
You should now have a wp-admin .htaccess file that has both the standard BPS Pro security .htaccess code and also the cPanel Directory Password Protection code combined. You can check this by going to the B-Core Edit/Upload/Download page and looking at the “Your Current wp-admin htaccess File” tab page.