If you want your site secure, go ahead and use this plugin. Just realize, that it will be SO secure, you will NOT be able to log in to your own site.
1. Problems with .htacess - despite checking the box to allow this plug in to write to the file, this works 1 out of 20 times, if at all.
2. Great interface until you try to access your site the next day. Email password does not work.
3. Modifying password directly in .php does not work.
Once I deleted this plug in, I was able to log into my site, post, approve comments, etc. In other words, I could blog. I find it very hard to believe that this plug in has gotten such high reviews given how totally unusable it is. If I could give it -10 stars I would as I spent 5 days trying to get this plugin to work. Unacceptable.