To increase the security of your data and the connection of torque, it is best to force encryption of your connection to avoid being hacked them.
In other words have a https: // that integrates an SSL key
There are extensions, but it is always better to have the least possible extension.
In your wp-config.php file, you can add this line:
define('FORCE_SSL_LOGIN', true);