htaccess and htpasswd

Your behavior is logical. the profile.php page is in the protected /wp-admin/ folder.
the wp-login.php is in the root (/), which is not protected.

Related Posts:

  1. What are the standard admin CSS id/class tags?
  2. Modal window from within WordPress admin
  3. How to Change the Default Home Page for the WordPress Dashboard?
  4. How To Remove WordPress Version From The Admin Footer
  5. Set Default Admin Colour For All Users
  6. Securing Admin Accounts – Username Discovery
  7. Can an admin check passwords of registered users?
  8. How-to make the admin area mobile friendly [closed]
  9. How to obtain the user ID of the current profile being edited in WP-Admin?
  10. 3.3: How do you hide the new dashboard welcome panel?
  11. Allow admin login at /admin
  12. Appearance->Editor not visible
  13. Possible to create placeholder images in WordPress editor that are clickable (should bring up uploader)?
  14. Admin pages have no content
  15. Blocking Administrative Access to Authors and Subcribers?
  16. How to find out if an wp-admin action edited a file?
  17. How to display only logged in user’s post comments in comments area
  18. WordPress 3.8 get current admin color scheme
  19. How to Use Resposive Tables in WordPress ADMIN Pages?
  20. How can I access profile Admin Colour Scheme
  21. I keep getting logged out in Firefox
  22. Add tabbed menu to admin page
  23. remove_action with profile_personal_options
  24. Getting the different post statuses + count like in edit.php, in a custom submenu page
  25. how to redirect to url.com/wp-admin if url.com/admin is typed in?
  26. How To Create User Specific Admin User Pages?
  27. Change the Default Pages Menu View in wp-admin
  28. Conditionally load CSS/JS/PHP in wp-admin if using a mobile device
  29. How to disable automatic excerpt generation *in admin*?
  30. Limit Words in Category / Term Description – Admin Panel
  31. Change top level menu item to point to custom submenu item
  32. Associating custom submenu item with post type of top level menu item
  33. Adding text in more than one language (at the same time)
  34. wp-admin post.php JavaScript Links Not Working
  35. Super slow admin panel
  36. Admin Taxonomy Terms – Orderby Term Field
  37. How do I add an admin notice within javascript in the admin interface for posts?
  38. Fatal error: Exception thrown without a stack frame in Unknown on line 0
  39. Hide Pages on Edit Pages based on Capability (edit_others_pages)?
  40. Unable to Access WP Admin or Login buttons after Migration
  41. Add ‘Last Modified’ and Attachments (Yes/No) to WordPress Users Column
  42. Editors change a permalink on an unpublished post, but only admins change a permalink on a post that has ever been published?
  43. Locked out of admin and some pictures don’t show after failed SSL installation
  44. How Can I Found Admin Directory
  45. WordPress post feature image not uploading
  46. Combine and Minify wp-admin files, also re-write URI’s for CDN
  47. 500 internal server error on wp-admin only
  48. Redirect from the dashboard to edit.php if wp_is_mobile() is true
  49. Seems that admin_post_{action} does not executing
  50. Add Custom Script in Other Plugin’s Options page
  51. When submitting the form site.com/blog/wp-admin it goes to site.com/wp-admin
  52. Can I host WP-admin locally for a remote blog?
  53. get_current_screen and the WP_Screen class
  54. Is there alternative to WP_List_Table?
  55. WordPress Brute Force Prevention
  56. Admin login not working
  57. Adding and removing columns from the admin pages panel
  58. How to make sure your admin doesn’t hi-jack you site?
  59. How to change the descriptive text on the menus admin page?
  60. Dynamic WordPress Admin Panel
  61. Wp-Admin FTPS Connection Error unlike Filezilla
  62. I can’t access login page
  63. How to update my website with WordPress?
  64. wordpress login loop after install
  65. Unable to render Admin Notices
  66. WordPress login not working
  67. Change Admin URL
  68. Admin blank but Admin menu showing
  69. Capability to read/edit page in wp-admin only for administrators
  70. Problems in migration of WordPress site from local server to the online server
  71. WYSIWYG editor not in a post editor?
  72. plugin to upload to youtube via wordpress [closed]
  73. You do not have permission to access this document on form submit
  74. Allow direct access to files/folders within WordPress to replace wp-admin
  75. WordPress site down for my IP only after trying to implement .htaccess whitelist
  76. Organizing Code in your WordPress Theme's functions.php File?
  77. How to remove admin menu pages inserted by plugins?
  78. Admin Ajax is returning 0
  79. Add custom column to Users admin panel
  80. Changing the Order of Admin Menu Sections?
  81. wp_verify_nonce vs check_admin_referer
  82. Add a Separator to the Admin Menu?
  83. How to determine whether we are in add New page/post/CPT or in edit page/post/CPT in wordpress admin?
  84. how to know if admin is in edit page or post [duplicate]
  85. “Too many redirects” ONLY when trying to access wp-admin page
  86. Placing a Custom Post Type Menu Above the Posts Menu Using menu_position?
  87. Where in WP can I check history or log of updates of plugins etc?
  88. Admin Page Redirect
  89. Disable dragging of meta boxes?
  90. Adding a custom admin page
  91. How does admin-ajax.php work?
  92. Loading External Scripts in Admin but ONLY for a Specific Post Type?
  93. How to remove entire admin menu?
  94. How do I remove dashboard access from specific user roles?
  95. How can I speed up my WP admin section?
  96. How to pass parameters to admin_notices?
  97. Admin: very slow edit page caused by core meta query
  98. if admin is logged in
  99. How to Add a Third Level Sub Menu to the WordPress Admin Menu
  100. Search posts by ID in admin
File not found.