Require WP login for outside access
Assuming you’re using Apache and don’t specifically need users to log in via WordPress, you can use HTTP Authentication. This Stack Overflow thread is what you’re looking for. Also, check out the documentation for Apache’s HTTP Authentication and Access Control.