Protecting WordPress login page

You can make it so no one can register by clicking off “Anyone can register” in your Admin.

Furthermore, you can choose a really good password, install a login lockdown plugin and enable logins over https. In most cases this is secure enough.

If your really paranoid you can allow access to only your IP by using .htaccess.

<Files wp-login.php>
    order deny,allow
    deny from all
    allow from 11.11.111.111 (your IP)
</Files>

To do a re-direct you can try something like this in your .htaccess.

RewriteEngine On
RewriteBase /
RewriteCond %{REMOTE_HOST} !^127\.0\.0\.1 (Your IP)
RewriteCond %{REQUEST_URI} !/wp-login\.php$ 
RewriteRule .* http://www.yourhomepage.com [R=403,L]
# 403 is a "forbidden", you can change this to another status code