Hi,
You can block not wp-login.php using htpassword, but wp-admin. In this case, you can change the login page to an custom slug, and when you try to redirect you to wp-admin, you will additionally enter the password that is set on your server.
If you want to block login page through the...