Originally Posted by TheDoc

If you are doing any members area protection, then I suggest strongbox's password protection system. The best when it comes to brute force attacks, it's fast and easy to use, and it's cheap.

Using just a standard htauth / htaccess file, can be troublesome and is very easy to brute force attack, almost impossible to keep up with duplicate users, and overall can just be a pain.